jfrog / jfrog/jfrog-cli-security
Jfrog SBOM report - Copy right information to be displayed
Nobody has claimed this yet.
- Dominant language
- Go
- Stars
- 13
- Forks
- 50
- Avg merge
- 3d 48m
- Merged PRs (30d)
- 26
Description
I have a question related to SBOM report in Jfrog xray. It gives me elaborated details about License used by the products and its type, But the copyright information of license is always displayed as No assertions. Can you comment on this please?
Also I wanted to filter the specific package and block its license in jfrog will it be possible?
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the JFrog Xray SBOM report shown in the issue and inspect how copyright information is represented. Investigate whether the repository has an entry point or tests for SBOM license reporting, then determine the expected copyright output and whether filtering a package by license is in scope. The issue provides no file or test location, so the relevant code must first be located.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100