DependencyTrack / DependencyTrack/dependency-track

sbom中带有证据的许可证分析不出来

Open
#3,290 1 comment 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

sbom中带有证据的许可证分析不出来
"component": {
"bom-ref": "pkg:golang/github.com/json-iterator/go@v1.1.13-0.20210911021726-024077e996b0?type=module",
"type": "application",
"name": "github.com/json-iterator/go",
"version": "v1.1.13-0.20210911021726-024077e996b0",
"purl": "pkg:golang/github.com/json-iterator/go@v1.1.13-0.20210911021726-024077e996b0?type=module\u0026goos=windows\u0026goarch=amd64",
"externalReferences": [
{
"url": "https://github.com/json-iterator/go",
"type": "vcs"
}
],
"evidence": {
"licenses": [
{
"license": {
"id": "MIT"
}
}
]
}
}

### Steps to Reproduce

![image](https://github.com/DependencyTrack/dependency-track/assets/108388033/3524f7c9-3081-46c1-b0c1-b998e080f5ce)

### Expected Behavior

可以分析带有证据的许可证信息

### Dependency-Track Version

4.8.x

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.