microsoft / microsoft/component-detection
OtherComponent: license and copyright properties
Nobody has claimed this yet.
- Dominant language
- C#
- Stars
- 553
- Forks
- 135
- Avg merge
- 20h 58m
- Merged PRs (30d)
- 6
Description
I'm trying to use the sbom-tool API with a custom component detector which produces instances of OtherComponent. This class does not have any properties to register copyright or license information.
Is there a way to cause license information and/or copyright to be added to the resulting sbom for "other" components? E.g. via code (I can only see non-extensible extension methods used for example), or if necessary via some post-processing step. If not, is this something that should be added?
For full extensibility, I can imagine there may be other properties one would like to implement as well.
I noticed issue #539 was closed as "out of scope", so maybe I'm out of luck here too.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating OtherComponent in the sbom-tool API and reviewing how custom component detectors contribute information to the resulting SBOM. Compare the requested license and copyright support with the extensibility concern in issue #539, then determine whether a supported API path or a scoped change is needed. Done means the supported approach or scope is clearly established.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- csharp
- Domain
- security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100