-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
Some valid SBOMs that are uploaded to SBOM-in-a-Box fail when attempting to convert them. This shouldn't happen since the original SBOM matches the required elements to be uploaded to SBOM-in-a-Box.
To Reproduce
Steps to reproduce the behavior:
- Use the SPDX SBOM attached to this card
- Open SBOM-in-a-Box
- Upload the SPDX SBOM
- Select it and press the Convert button
- In the pop-up, select CDX14 for 'format' and use any desired schema.
- Select Convert in the pop-up window.
Expected behavior
The SBOM will not be converted. Reload the SBOM-in-a-Box client to confirm.
The following message was displayed in the terminal when attempting to convert the SPDX SBOM to a CDX14 SBOM.
svip-api | 2024-01-03 19:33:51.379 | ERROR | Serialized SBOM does not match schema=CDX14 (null)
Screenshots
If applicable, add screenshots to help explain your problem.
Additional context
The file in question:
dubboMavenSBOMSPDX.txt
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working