DependencyTrack / DependencyTrack/dependency-track
Components without group and version
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Issue Type:
- [ ] defect report
- [x] enhancement request
### Current Behavior:
After importing XML from OWASP dependency check some components are shown without group and version. Instead component name is shown as the jar file name.
### Steps to Reproduce (if defect):
- scan a java gradle project with a dependency to antlr:antlr:2.7.7
- export XML report
- import via REST API to D-Track
- view component antlr-2.7.7.jar -> no group set
### Expected Behavior:
Group should be antlr and not empty, version should be 2.7.7 and name should be antlr
### Environment:
- Dependency-Track Version: 3.4.0
- Distribution: Docker
- BOM Format & Version:
- Database Server: H2
- Browser: Chrome
### Other Details:

Contributor guide
Assessment
This issue has not been assessed yet.