CycloneDX / CycloneDX/cyclonedx-cli

Conversion creates invalid SPDX

Open
#345 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
541
Forks
82
PR merge metrics
No merged PRs in 30d

Description

[hello.spdx.json.txt](https://github.com/CycloneDX/cyclonedx-cli/files/12818323/hello.spdx.json.txt)
[hello-cyclonedx.json.txt](https://github.com/CycloneDX/cyclonedx-cli/files/12818326/hello-cyclonedx.json.txt)
[hello-cyclonedx-spdx.json.txt](https://github.com/CycloneDX/cyclonedx-cli/files/12818328/hello-cyclonedx-spdx.json.txt)

Convert from SPDX to CycloneDX:
```
cyclonedx convert --input-file hello.spdx.json --input-format spdxjson --output-file hello-cyclonedx.json --output-format json
```
Convert the result to SPDX:
```
cyclonedx convert --input-file hello-cyclonedx.json --input-format json --output-file hello-cyclonedx-spdx.json --output-format spdxjson
```
Resulting SPDX is invalid:
```
pyspdxtools -i hello-cyclonedx-spdx.json
ERROR:root:The document is invalid. The following issues have been found:
license_info_from_files must be None if files_analyzed is False, but is: [NOASSERTION]
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.