CycloneDX/cdxgen issues and pull requests

#722 - Skip upload if BOM is empty

Issue - State: closed - Opened by gbennett-squarespace 11 months ago - 2 comments

#721 - Fixes for Server params

Pull Request - State: closed - Opened by gbennett-squarespace 11 months ago - 5 comments

#720 - Fixes for Server params

Pull Request - State: closed - Opened by gbennett-squarespace 11 months ago - 1 comment

#719 - Update packages

Pull Request - State: closed - Opened by prabhu 11 months ago

#718 - BOM upload creating duplicate projects when running server

Issue - State: open - Opened by gbennett-squarespace 11 months ago - 1 comment

#718 - BOM upload creating duplicate projects when running server

Issue - State: open - Opened by gbennett-squarespace 11 months ago - 1 comment

#717 - Support for private docker registry

Pull Request - State: closed - Opened by prabhu 11 months ago - 2 comments

#716 - Support for vb.net projects

Issue - State: open - Opened by prabhu 11 months ago
Labels: good first issue, help wanted, Consider Funding

#715 - Handle shaded usages better

Pull Request - State: closed - Opened by prabhu 11 months ago

#714 - evinse is too slow for apache hbase

Issue - State: closed - Opened by prabhu 11 months ago - 1 comment

#713 - Convert to TypeScript

Issue - State: open - Opened by setchy 11 months ago
Labels: refactor

#711 - Refactor to use smaller language specific modules

Issue - State: open - Opened by setchy 11 months ago
Labels: refactor

#710 - feat: ignore test/data files from codacy static analysis

Pull Request - State: closed - Opened by setchy 11 months ago
Labels: enhancement

#709 - Enhance route detection for java with latest atom

Pull Request - State: closed - Opened by prabhu 11 months ago

#708 - Fix #703

Pull Request - State: closed - Opened by reunanen 11 months ago

#707 - build: update gitignore to exclude locally generated bom.json

Pull Request - State: closed - Opened by setchy 11 months ago

#706 - Setup code coverage reporting

Issue - State: open - Opened by setchy 11 months ago

#706 - Setup code coverage reporting

Issue - State: open - Opened by setchy 11 months ago

#705 - docs: fix spelling

Pull Request - State: open - Opened by setchy 11 months ago

#705 - fix: correct spelling

Pull Request - State: closed - Opened by setchy 11 months ago - 1 comment
Labels: documentation

#704 - feat: add support for Dockerfile/Containerfile

Pull Request - State: closed - Opened by setchy 11 months ago - 2 comments

#704 - feat: add support for Dockerfile/Containerfile

Pull Request - State: closed - Opened by setchy 11 months ago - 2 comments
Labels: enhancement

#703 - Possible regression in version 9.9.2: `[ 'Invalid purl pkg:generic/:opencv' ]`

Issue - State: closed - Opened by reunanen 11 months ago - 3 comments

#703 - Possible regression in version 9.9.2: `[ 'Invalid purl pkg:generic/:opencv' ]`

Issue - State: open - Opened by reunanen 11 months ago - 1 comment

#702 - unit test failure when updating arborist to 7.2.1

Issue - State: closed - Opened by prabhu 11 months ago - 2 comments

#702 - unit test failure when updating arborist to 7.2.1

Issue - State: closed - Opened by prabhu 11 months ago - 2 comments

#701 - Support for excluding directories. Tweaks to cache jar namespaces

Pull Request - State: closed - Opened by prabhu 11 months ago

#701 - Support for excluding directories. Tweaks to cache jar namespaces

Pull Request - State: closed - Opened by prabhu 11 months ago

#700 - feat: populate dependencies for oci components

Pull Request - State: closed - Opened by setchy 11 months ago - 1 comment

#699 - Configure Renovate Bot to help automate dependency updates

Issue - State: open - Opened by setchy 11 months ago - 2 comments
Labels: enhancement

#697 - OCI: Add support for dependencies

Issue - State: open - Opened by setchy 11 months ago - 6 comments
Labels: enhancement

#696 - feat: oci image support for multiple src files

Pull Request - State: closed - Opened by setchy 11 months ago - 6 comments
Labels: enhancement

#695 - Support for .ABOUT yaml file

Issue - State: open - Opened by prabhu 11 months ago
Labels: help wanted, Consider Funding

#694 - Automatic Image Pull for Private Docker Registry in cdxgen

Issue - State: open - Opened by pooja0805 11 months ago - 4 comments

#693 - cdxgen command throughs error when running the scan on a very large project folder

Issue - State: open - Opened by visagansanthanam-unisys 11 months ago - 3 comments

#692 - fix: correctly set projectType option

Pull Request - State: closed - Opened by setchy 11 months ago
Labels: bug

#691 - feat: add Dockerfile support

Pull Request - State: closed - Opened by setchy 11 months ago - 5 comments
Labels: enhancement

#690 - Follow CycloneDX 1.4 spec for SPDX license expressions for npm.

Pull Request - State: open - Opened by ansonallard 11 months ago - 7 comments

#689 - Support for linking an existing bom with externalReferences

Issue - State: open - Opened by prabhu 11 months ago
Labels: enhancement, help wanted, Consider Funding

#688 - cpp improvements

Pull Request - State: closed - Opened by prabhu 11 months ago
Labels: help wanted

#687 - [java] --deep mode for mono repos is slow

Issue - State: closed - Opened by prabhu 11 months ago

#686 - [deno] repotests have started failing

Issue - State: closed - Opened by prabhu 11 months ago
Labels: bug, help wanted

#685 - Mapping to scvs

Issue - State: open - Opened by prabhu 11 months ago - 3 comments

#684 - Force version argument to be a string

Pull Request - State: closed - Opened by prabhu 11 months ago

#683 - author information passed by the --author parameter is overwritten by DependencyTrack tool

Issue - State: open - Opened by visagansanthanam-unisys 11 months ago - 1 comment

#682 - Fix fetching licenses for jvm packages

Pull Request - State: closed - Opened by puchta 11 months ago - 6 comments

#681 - fix required-only,add girBranch to server

Pull Request - State: closed - Opened by avgkoster 11 months ago - 2 comments

#680 - Migrate from Buffer to Uint8Array

Issue - State: open - Opened by prabhu 11 months ago

#679 - cdxgen does not follow CycloneDX 1.4 spec for SPDX license expressions

Issue - State: closed - Opened by ansonallard 11 months ago - 3 comments

#678 - Feature/transitive require

Pull Request - State: closed - Opened by avgkoster 11 months ago - 3 comments

#677 - [Python] Track git referenced packages

Issue - State: open - Opened by prabhu 11 months ago

#676 - Feature/evinse python

Pull Request - State: closed - Opened by prabhu 11 months ago

#674 - JavaScript analyzer does not output evidence if a transitive of direct is called

Issue - State: closed - Opened by avgkoster 11 months ago - 8 comments

#673 - cdxgen command when run with --project-name and --project-version instead of --project-id parameter not working as intended

Issue - State: closed - Opened by visagansanthanam-unisys 11 months ago - 11 comments
Labels: bug

#672 - Improved fetching license information for npm packages

Pull Request - State: closed - Opened by puchta 11 months ago - 1 comment

#671 - cdxgen fails to fetch license information for some projects even though they are present in npm metadata

Issue - State: closed - Opened by puchta 11 months ago - 1 comment

#670 - Using latest version when there is also an entry that includes the version

Issue - State: open - Opened by cerrussell 11 months ago - 4 comments

#669 - Output for pnpm project is unexpected and invalid

Issue - State: closed - Opened by rysearle 11 months ago - 3 comments

#668 - Deducing license information for PyPI packages from classifiers (if not stated explicite)

Pull Request - State: closed - Opened by puchta 11 months ago

#667 - Some Boms are not created in multiProject mode: docker-compose.yml is not analyzed

Issue - State: open - Opened by marob 11 months ago - 1 comment

#666 - requirements.txt false positive

Issue - State: open - Opened by marob 11 months ago

#665 - cdxgen fails to fetch license information for some projects even though they are present in pypi

Issue - State: open - Opened by puchta 11 months ago - 4 comments

#664 - Generated license sometimes not valid according to BOM schema

Issue - State: open - Opened by marob 11 months ago - 3 comments

#663 - Fixes #480

Pull Request - State: closed - Opened by marob 11 months ago

#662 - Fixes #661

Pull Request - State: closed - Opened by marob 11 months ago - 2 comments

#661 - Incorrect "author" when in object format inside package.json

Issue - State: closed - Opened by marob 11 months ago

#660 - JS reachables

Pull Request - State: closed - Opened by prabhu 11 months ago - 1 comment

#659 - fix typo

Pull Request - State: closed - Opened by iamahens 11 months ago - 5 comments

#657 - Support Dockerfile

Issue - State: closed - Opened by setchy 12 months ago - 3 comments

#656 - Reachable slices + Bug fixes

Pull Request - State: open - Opened by prabhu 12 months ago - 1 comment

#655 - Set asciiGraphWidth to 400 for all subprojects in case of a multiproject sbt

Pull Request - State: closed - Opened by puchta 12 months ago

#654 - Need option to provide custom authors and metadata in the SBOM file

Issue - State: closed - Opened by visagansanthanam-unisys 12 months ago - 7 comments

#653 - Add support for PyPi index as environment variable

Issue - State: open - Opened by cryptator 12 months ago

#652 - Improved detection for standalone jar files

Pull Request - State: closed - Opened by Nikemare 12 months ago - 1 comment

#651 - asciiGraphWidth does not work well in multiproject builds

Issue - State: closed - Opened by puchta 12 months ago - 4 comments

#650 - Migrate away from using scope attribute

Issue - State: open - Opened by prabhu 12 months ago

#649 - gradle dependencies task fails on large gradle projects

Issue - State: open - Opened by MCDong 12 months ago - 3 comments

#648 - sbom insights feature

Issue - State: open - Opened by prabhu 12 months ago

#647 - Docker image+tag scan failing

Issue - State: open - Opened by setchy 12 months ago - 12 comments

#646 - Extend NuGet querying

Pull Request - State: closed - Opened by robaliias 12 months ago

#645 - Paket.lock - include patch versions when omitted by Paket

Pull Request - State: closed - Opened by robaliias 12 months ago - 2 comments

#644 - Perform bom-ref decode during creation at source

Pull Request - State: closed - Opened by prabhu 12 months ago

#643 - Java Dependencies from a JAR File inside a Docker Image are not extracted

Issue - State: closed - Opened by sherifkayad 12 months ago - 5 comments

#642 - refactor: remove dependency track spec downgrade

Pull Request - State: closed - Opened by setchy 12 months ago
Labels: refactor

#641 - Component not listed in Dependencies

Issue - State: closed - Opened by emcfins 12 months ago - 3 comments

#640 - Dotnet dependency tree not preserved without type flag

Issue - State: open - Opened by robaliias 12 months ago - 2 comments

#639 - Add dependency tree for paket.lock files

Pull Request - State: closed - Opened by robaliias 12 months ago - 1 comment

#638 - Fix dotnet project.assets dependency tree

Pull Request - State: closed - Opened by robaliias 12 months ago

#637 - cdxgen server: Slicing was not successful. (Failed generating BOM for Python)

Issue - State: closed - Opened by gbennett-squarespace 12 months ago - 8 comments

#635 - Scan failes with docker

Issue - State: closed - Opened by BoBeR182 12 months ago - 6 comments

#634 - Filters and config files support

Pull Request - State: closed - Opened by prabhu 12 months ago

#633 - Trim dotnet sbom by tracking resolved versions

Pull Request - State: closed - Opened by prabhu 12 months ago - 4 comments

#632 - Bugfix/dotnet project assets parsing

Pull Request - State: closed - Opened by robaliias 12 months ago

#631 - dotnet - project.assets.json parsing creates extra package versions in the BOM

Issue - State: closed - Opened by robaliias 12 months ago - 2 comments

#630 - Support for specifying the purpose/use case for BOM

Issue - State: closed - Opened by prabhu 12 months ago

#629 - Fallback to docker sbom command

Issue - State: open - Opened by prabhu 12 months ago

#626 - Enable deep mode for poetry

Pull Request - State: closed - Opened by prabhu 12 months ago

#625 - missing components on dotnet based project

Issue - State: closed - Opened by visagansanthanam-unisys 12 months ago - 10 comments
Labels: enhancement, Consider Funding

#624 - feat: sort components

Pull Request - State: open - Opened by cerrussell 12 months ago - 1 comment

#623 - Document the list of available types supported by cdxgen

Issue - State: closed - Opened by prabhu 12 months ago - 4 comments
Labels: documentation

GitHub / CycloneDX/cdxgen issues and pull requests