CycloneDX / CycloneDX/cyclonedx-gradle-plugin

Option to choose license

Open
#784 0 comments 3 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
239
Forks
102
Avg merge
1d 9h
Merged PRs (30d)
11

Description

### Is your feature request related to a problem? Please describe.

Quite often there is a requirement to choose just one of the licenses provided by library (OR condition). It would be nice to have an option to preselect the target license so final SBOM will be generated just with this license. Additionally, this could be extended to provide the `default` license, if there is no license provided for some component.

### Describe the solution you'd like

We can provide a config option which will match `group:name:version` with regular expression and provide `Id` or `Name` of the license. Not sure which information is needed for selection of license.

### Describe alternatives you've considered

_No response_

### Additional context

I can provide an implementation but would be nice if someone suggest some naming convention and/or relevant information if we need more then described above.

### Contribution

- [x] I am willing to provide an implementation
- [ ] I will wait until somebody else implements it

Contributor guide

Open the contributing guide

Research direction

No files, tests, or entry points are named. Start by tracing the Gradle plugin configuration and license generation path, then define how regex matches group:name:version and whether license Id or Name is selected. Done means the configuration supports a chosen license and a default for components without one, with tests covering both cases.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.