CycloneDX / CycloneDX/cyclonedx-core-java
Deserialization of SBOM defaults the metadata/timestamp
Open
- Dominant language
- Java
- Stars
- 120
- Forks
- 90
- Avg merge
- 12h 43m
- Merged PRs (30d)
- 18
Description
```java
public class Metadata extends ExtensibleElement {
@JsonSerialize(using = CustomDateSerializer.class)
@VersionFilter(versions = {"1.2", "1.3", "1.4"})
private Date timestamp = new Date();
```
This is useful (perhaps) when creating a new SBOM programmatically, to then be serialized. It is misleading when deserializing an existing SBOM without a timestamp where the current date/time may not be expected.
Contributor guide
Assessment
This issue has not been assessed yet.