CycloneDX / CycloneDX/cyclonedx-cli

Support github license resolution

Open
#106 0 comments 2 reactions 0 assignees View on GitHub
enhancement good first issue help wanted
Dominant language
C#
Stars
541
Forks
82
PR merge metrics
No merged PRs in 30d

Description

The CLI tool should support automatic resolving and augmentation of license information, when it is missing, for components in an SBOM.

For components with an external reference to a GitHub repo it should be possible, in a lot of cases, to automatically resolve license information using the API.

This is already supported in the .NET implementation (https://github.com/CycloneDX/cyclonedx-dotnet/pull/39). But there is an obvious need for this to be available across ecosystems (https://github.com/CycloneDX/cyclonedx-gomod/issues/2).

Supporting this in the CLI tool shouldn't be much effort. But the first step would be to refactor it into the .NET library so both the CLI tool and .NET implementation can leverage the same methods.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.