DependencyTrack / DependencyTrack/dependency-track
Add license text to BOM export
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
This enhancement request is created based on https://github.com/DependencyTrack/dependency-track/issues/1990#issuecomment-1270346726
### Current Behavior:
The Json downloaded from DependencyTrack via the API endpoint `/api/v1/bom/cyclonedx/project/{uuid}`, does not contain the license text anymore. The license text is available in the input bom.xml, within DependencyTrack but not in the downloaded Json.
### Proposed Behavior:
There is an option to include license texts in the exported Json. If activated, the exported Json contains the license texts.
Contributor guide
Research direction
Start at the `/api/v1/bom/cyclonedx/project/{uuid}` endpoint and trace how the BOM is exported to JSON. Check how an export option could be exposed and how license text from the input `bom.xml` is represented. Done means the option is available and enabled exports include the license texts.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- api, backend
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100