CycloneDX / CycloneDX/cyclonedx-core-java
Empty metadata --> tool tag causes parsing exception
- Lenguaje dominante
- Java
- Estrellas
- 120
- Forks
- 90
- Merge medio
- 12 h 43 min
- PR fusionados (30 d)
- 18
Descripción
Hello, I have a question regarding an exception I get when parsing a 1.3 CycloneDX SBOM.
According to the specification, the `` tag in the `` section is an `array`, which does not specify a constraint to it's size: https://cyclonedx.org/docs/1.3/json/#metadata_tools
However, when I try to parse an SBOM like this using your library:
```xml
```
I get this exception:
```
com.fasterxml.jackson.databind.JsonMappingException: Cannot coerce empty String ("") to `org.cyclonedx.model.Tool` value (but could if coercion was enabled using `CoercionConfig`)
at [Source: UNKNOWN; byte offset: #UNKNOWN] (through reference chain: org.cyclonedx.model.Bom["metadata"])
```
The SBOM is generated using a tool, but it does not fill out this property.
I was wondering whether this behavior is intended or whether this is a difference to the specification that I did not understand.
Thank you for your time.
Guía de contribución
Línea de trabajo
Reproduce la excepción con el XML de CycloneDX 1.3 mostrado y, a continuación, rastrea la deserialización a través de org.cyclonedx.model.Bom metadata y org.cyclonedx.model.Tool. Confirma si la especificación acepta un elemento tools vacío y considera completado el issue cuando esa entrada se gestione de forma coherente sin la excepción de parsing indicada.
Escrito por el modelo de indexación a partir del texto del issue.
Evaluación
- Stack tecnológico
- java
- Área
- backend
- Tipo de issue
- Error
- Dificultad
- 3/5
- Tiempo estimado
- 1-2 días
- Estado de actividad
- Estancado
- Claridad
- Bastante claro
- Aptitud para principiantes
- 45/100