CycloneDX / cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Home Page:https://cyclonedx.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Invalid BOM generated

stephanruhland-netzebw opened this issue · comments

Hi,
CycloneDX DotNet in Version 2.8.1.0 seems to write invalid BOM.XML files. The validation error on CycloneDX Web Tool is the following message:

Validation failed at line number 623 and position 28: The 'http://cyclonedx.org/schema/bom/1.4:id' element is invalid - The value 'NOASSERTION' is invalid according to its datatype 'http://cyclonedx.org/schema/spdx:licenseId' - The Enumeration constraint failed.

So the value "NOASSERTION" is not a valid enum value for the licenseid. The part of the xml can be seen here:
image

Are there ideas for this case?
Thank you

Thank you for reporting.

Duplicate of #525.
See my latest reply there for more information.

Thank you for the quick reply