CycloneDX / CycloneDX/cyclonedx-core-java

Deserialization of SBOM defaults the metadata/timestamp

Open
#258 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Java
Stars
120
Forks
90
Avg merge
12h 43m
Merged PRs (30d)
18

Description

```java
public class Metadata extends ExtensibleElement {

@JsonSerialize(using = CustomDateSerializer.class)
@VersionFilter(versions = {"1.2", "1.3", "1.4"})
private Date timestamp = new Date();
```

This is useful (perhaps) when creating a new SBOM programmatically, to then be serialized. It is misleading when deserializing an existing SBOM without a timestamp where the current date/time may not be expected.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.