DependencyTrack / DependencyTrack/dependency-track

Purl of project disappear after submit the sbom

Open
#4,268 3 comments 0 reactions 0 assignees View on GitHub
defect pending more information
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Hello,

Firstly, we upload the sbom to one dependency track server, after dependency tack done analysis, we download the sbom from and we found that inside of it the `purl` of our project disappeared :(

### Steps to Reproduce

1. upload sbom [cdxgen.json](https://github.com/user-attachments/files/17408507/cdxgen.json)

3. redownload sbom with vulnerabilities [dependecy-track-sbom.json](https://github.com/user-attachments/files/17408515/dependecy-track-sbom.json)

### Expected Behavior

The purl should be keep in meta data

### Dependency-Track Version

4.11.x

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [x] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [x] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.