DependencyTrack / DependencyTrack/dependency-track

Components without group and version

Open
#316 4 comments 0 reactions 0 assignees View on GitHub
enhancement p2
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Issue Type:
- [ ] defect report
- [x] enhancement request


### Current Behavior:
After importing XML from OWASP dependency check some components are shown without group and version. Instead component name is shown as the jar file name.

### Steps to Reproduce (if defect):
- scan a java gradle project with a dependency to antlr:antlr:2.7.7
- export XML report
- import via REST API to D-Track
- view component antlr-2.7.7.jar -> no group set

### Expected Behavior:
Group should be antlr and not empty, version should be 2.7.7 and name should be antlr

### Environment:

- Dependency-Track Version: 3.4.0
- Distribution: Docker
- BOM Format & Version:
- Database Server: H2
- Browser: Chrome

### Other Details:

![image](https://user-images.githubusercontent.com/33459119/56018527-a7eaa000-5d02-11e9-98e3-b5f44ed5ab6d.png)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.