microsoft / sbom-tool

The SBOM tool is a highly scalable and enterprise ready tool to create SPDX 2.2 compatible SBOMs for any variety of artifacts.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Discussion] Error while generating SBOM

sfoslund opened this issue · comments

[This thread is imported from a GitHub discussion prior to this repo's discussion tab being disabled to preserve history.]

[Sep 28, 2022] While I am trying to generate an SBOM for my NPM project, I am getting an error as shown below
[INFO] Detection time: 0.1139456 seconds.
[INFO] Scan Manifest file: /tmp/ScanManifest_20220927150421.json
##[error]Encountered an error while generating the manifest.
##[error]Error details: Unable to generate a package name based on provided parameters. Please provide the package name in the 'PackageName' parameter.
While I am providing my entire NPM project source folder to the parameter -b and the folder path where I have my package.json to parameter -bc. Tool is asking me to provide the package name specifically. Can you please let me know whether I am doing anything wrong here.

You need to provide the -PackageName parameter, it should contain the name of the actual package for which the sbom is generated. Please follow the list of arguments here: https://github.com/microsoft/sbom-tool/blob/main/docs/sbom-tool-arguments.md