aboutcode-org / aboutcode-org/scancode-toolkit

Cannot output SBOM in cycloneDX format in tutorial

未关闭
#3,784 6 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
bug
主要语言
Python
星标
2.6k
派生
791
平均合并
1 天 12 小时
30 天内合并 PR
5

描述

### Description

Tutorials are provided.
The command as in the tutorial outputs SBOM, but if I set output to --cyclonedx, it does not output the correct SBOM.

### How To Reproduce

tutorial command
` ./scancode -clpeui -n 2 --ignore "*.java" --json-pp sample.json samples `

Commands I have executed
` ./scancode -clpeui -n 2 --ignore "*.java" --cyclonedx sample.json samples `

output
```
{
"bomFormat": "CycloneDX",
"specVersion": "1.3",
"serialNumber": "urn:uuid:1a1b4416-ac60-4192-8743-e5297669c340",
"version": 1,
"metadata": {
"timestamp": "2024-05-21T09:53:32Z",
"tools": [
{
"vendor": "AboutCode.org",
"name": "scancode-toolkit",
"version": "32.1.0"
}
],
"properties": [
{
"name": "notice",
"value": "Generated with ScanCode and provided on an \"AS IS\" BASIS, WITHOUT WARRANTIES\nOR CONDITIONS OF ANY KIND, either express or implied. No content created from\nScanCode should be considered or used as legal advice. Consult an Attorney\nfor any legal advice.\nScanCode is a free software code scanning tool from nexB Inc. and others.\nVisit https://github.com/nexB/scancode-toolkit/ for support and download."
},
{
"name": "errors",
"value": []
},
{
"name": "warnings",
"value": []
},
{
"name": "message",
"value": null
},
{
"name": "system_environment",
"value": {
"operating_system": "linux",
"cpu_architecture": "64",
"platform": "Linux-5.15.146.1-microsoft-standard-WSL2-x86_64-with-glibc2.35",
"platform_version": "#1 SMP Thu Jan 11 04:09:03 UTC 2024",
"python_version": "3.10.12 (main, Nov 20 2023, 15:14:05) [GCC 11.4.0]"
}
},
{
"name": "spdx_license_list_version",
"value": "3.23"
}
]
},
"components": [],
"dependencies": []
}
```
this output do not write scan result.
And I need the Schema property and it is not included in the json file above.
If you already have a solution to these problems, please let me know.### System configuration.
Thank you!

> For bug reports, it really helps us to know:

* What OS are you running on? (Windows/MacOS/Linux)
wsl2 ubuntu
* What version of scancode-toolkit was used to generate the scan file?
version v32.1.0
* What installation method was used to install/run scancode? (pip/source download/other)
source download

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。