DependencyTrack / DependencyTrack/dependency-track

Add license text to BOM export

Open
#2,018 0 comments 6 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

This enhancement request is created based on https://github.com/DependencyTrack/dependency-track/issues/1990#issuecomment-1270346726

### Current Behavior:
The Json downloaded from DependencyTrack via the API endpoint `/api/v1/bom/cyclonedx/project/{uuid}`, does not contain the license text anymore. The license text is available in the input bom.xml, within DependencyTrack but not in the downloaded Json.

### Proposed Behavior:
There is an option to include license texts in the exported Json. If activated, the exported Json contains the license texts.

Contributor guide

Open the contributing guide

Research direction

Start at the `/api/v1/bom/cyclonedx/project/{uuid}` endpoint and trace how the BOM is exported to JSON. Check how an export option could be exposed and how license text from the input `bom.xml` is represented. Done means the option is available and enabled exports include the license texts.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
api, backend
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
42/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.