DependencyTrack / DependencyTrack/dependency-track
sbom中带有证据的许可证分析不出来
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
sbom中带有证据的许可证分析不出来
"component": {
"bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.13-0.20210911021726-024077e996b0?type=module",
"type": "application",
"name": "github.com/json-iterator/go",
"version": "v1.1.13-0.20210911021726-024077e996b0",
"purl": "pkg:golang/github.com/json-iterator/go@v1.1.13-0.20210911021726-024077e996b0?type=module\u0026goos=windows\u0026goarch=amd64",
"externalReferences": [
{
"url": "https://github.com/json-iterator/go",
"type": "vcs"
}
],
"evidence": {
"licenses": [
{
"license": {
"id": "MIT"
}
}
]
}
}
### Steps to Reproduce

### Expected Behavior
可以分析带有证据的许可证信息
### Dependency-Track Version
4.8.x
### Dependency-Track Distribution
Container Image
### Database Server
PostgreSQL
### Database Server Version
_No response_
### Browser
Google Chrome
### Checklist
- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported
Contributor guide
Assessment
This issue has not been assessed yet.