DependencyTrack / DependencyTrack/dependency-track
Purl of project disappear after submit the sbom
- Dominant language
- Java
- Stars
- 4.2k
- Forks
- 811
- Avg merge
- 8h 39m
- Merged PRs (30d)
- 237
Description
### Current Behavior
Hello,
Firstly, we upload the sbom to one dependency track server, after dependency tack done analysis, we download the sbom from and we found that inside of it the `purl` of our project disappeared :(
### Steps to Reproduce
1. upload sbom [cdxgen.json](https://github.com/user-attachments/files/17408507/cdxgen.json)
3. redownload sbom with vulnerabilities [dependecy-track-sbom.json](https://github.com/user-attachments/files/17408515/dependecy-track-sbom.json)
### Expected Behavior
The purl should be keep in meta data
### Dependency-Track Version
4.11.x
### Dependency-Track Distribution
Container Image
### Database Server
PostgreSQL
### Database Server Version
_No response_
### Browser
Google Chrome
### Checklist
- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported
Contributor guide
Assessment
This issue has not been assessed yet.