CycloneDX / CycloneDX/cyclonedx-ruby-gem

SBOM Schema validation failed

Open
#92 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
Ruby
Stars
36
Forks
21
PR merge metrics
No merged PRs in 30d

Description

Hello,

I am trying to create sbom for a project [onetimesecret-v0.23.2](https://github.com/onetimesecret/onetimesecret/tree/v0.23.2) and using the `cyclonedx-ruby` tool.

I am building the `cyclonedx-ruby` directly from the git repo since the latest version 1.2.0 is not present in the RubyGems.

The sbom is created but when I upload it to dependency-track I get the error:-

```
The uploaded BOM is invalid
Schema validation failed
```

I guess it is missing some fields from the generated sbom file.

I am also attaching the sbom file for your reference.

Please Help
Thanks

[onetimesecret-v0.23.2_sbom.json](https://github.com/user-attachments/files/31033531/onetimesecret-v0.23.2_sbom.json)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.