Failed to convert valid RDF type SBOM into another format
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 101
- Forks
- 46
- Avg merge
- 9h 43m
- Merged PRs (30d)
- 8
Description
Description
There is a failure in converting the valid RFD type SBOM into another format.
During verification, it produces some license-related warnings but confirms that the SBOM is valid. However, it results in an error during conversion:
Error converting: Error converting SPDX file: class java.lang.RuntimeException org.spdx.spdxRdfStore.SpdxRdfException: http://spdx.org/rdf/terms#isDeprecatedLicenseId was not found related to class http://spdx.org/rdf/terms#ListedLicenseException
Steps to reproduce
- Download the SBOM zip and extract it -
nginx_1.27-spdx-1.zip - Verify the SBOM
java -jar ./tools-java/target/tools-java-2.0.1-jar-with-dependencies.jar Verify /Downloads/nginx_1.27-spdx-1.rdf - Convert sbom into JSON format
java -jar ./tools-java/target/tools-java-2.0.1-jar-with-dependencies.jar Convert /Downloads/nginx_1.27-spdx-1.rdf test.json
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the tools-java command-line Verify and Convert invocations described in the issue, using the attached nginx_1.27-spdx-1.rdf input. Trace the conversion failure involving isDeprecatedLicenseId and ListedLicenseException, then confirm that converting this valid RDF SBOM to JSON completes successfully without the reported error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- cli
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100