aboutcode-org / aboutcode-org/scancode.io
Parts of the latest CycloneDX specs (1.5, 1.6) are not supported by `cyclonedx-python-lib`
Đang mở
- Ngôn ngữ chính
- Python
- Star
- 215
- Fork
- 203
- Merge trung bình
- 4 ngày 8 giờ
- Pull request đã merge (30 ngày)
- 6
Mô tả
For example, the `metadata.tools` as an array was deprecated in 1.5 and replaced by an object structure where you can define a list of `components` and `services`.
The issue is that the new structure is not supported by the `cyclonedx-python-lib`, neither for serialization (output) nor deserialization (input).
It can be in the way of loading a SBOM that is valid regarding the spec, but fails the deserialization.
https://github.com/CycloneDX/cyclonedx-python-lib/issues/561#issuecomment-1972673735
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.