tektronix / tektronix/python-package-ci-cd
[BUG]: Generated SBOM doesn't contain license information
Open
Nobody has claimed this yet.
bug
reusable-workflows
- Dominant language
- Python
- Stars
- 6
- Forks
- 1
- Avg merge
- 15h 7m
- Merged PRs (30d)
- 27
Description
Description of the bug
The generated SBOM doesn't contain any license information on the dependencies.
Steps To Reproduce
Download any of the generated SBOMs to see if license information is available. They all list "NOASSERTION" for license information.
Environment Information
No response
Additional Information
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Download any generated SBOM and inspect the dependency license fields, confirming the reported NOASSERTION values. Then trace the workflow or action that generates the SBOM and how license metadata is obtained. Done means generated SBOMs include license information for dependencies.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- devops, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100