aboutcode-org / aboutcode-org/scancode.io

Trivy CycloneDX SBOM provides base64 encoded texts that we may not detect or report an "unknown" license

Open
#770 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
215
Forks
203
Avg merge
4d 8h
Merged PRs (30d)
6

Description

https://github.com/aquasecurity/trivy Trivy CycloneDX SBOM provides base64 encoded texts that we may not detect or report an "unknown" license. This is a somehow odd feature of CycloneDX that we should support when importing SBOMs so we can get a proper license detected from the decoded license text.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.