philips-software / spdx-builder

Generates SPDX bill-of-material files from a package input and license scan

philips-software/spdx-builder Issues

Fix get-license workflow..
Closed 2 years ago
SPDX file root package information should be available after creation information
Closed 3 years ago1
pacakge summary field and package description field need to be formatted
Updated 3 years ago
PackageSupplier field with NOASSERTION value.
Closed 3 years ago
SPDX file - Package checksum is missing for the packages
Updated 3 years ago1
Creator can not be NOASSERTION
Updated 3 years ago
SPDX field 'created' should point to the time the version is created in the project in Blackduck
Updated 3 years ago
Document on NTIA minimum requirements and how it applies to SPDX builder.
Updated 3 years ago
[tree] Create NuGet parser
Closed 3 years ago1
Some Black Duck projects include circular dependencies
Updated 3 years ago1
[blackduck] Export tree-ouput does not work on Golang
Updated 3 years ago
Gradle Properties includes Philips Artifactory reference
Updated 3 years ago
Add yarn tree parser
Closed 3 years ago3
[blackduck] Java projects seem to have an entry namespace: "unknown" id: "null". It crashes Spdx-builder
Closed 3 years ago2
Create new version v0.5.0 with blackduck support
Closed 3 years ago2
Tree import for pipenv fails on exact requirement.
Closed 3 years ago
Add banner so it's more clear where the tool starts.
Closed 3 years ago1
Publish jar on release
Closed 4 years ago1