Tweak dotnet message

Signed-off-by: Prabhu Subramanian <[email protected]>

README.md

@@ -464,7 +464,7 @@ Use the [CycloneDX CLI][cyclonedx-cli-github] tool for advanced use cases such a
 
 For `dotnet` and `dotnet-framework`, SBOM could include components without a version number. Often, these components begin with the prefix `System.`.
 
-Global Assembly Cache (GAC) dependencies must be made available in the build output of the project for version detection. A simple way to have the dotnet build copy the GAC dependencies into the build directory is to place the file `Directory.Build.props` into the root of the project and ensure the contents include the following:
+Global Assembly Cache (GAC) dependencies (System Runtime dependencies) must be made available in the build output of the project for version detection. A simple way to have the dotnet build copy the GAC dependencies into the build directory is to place the file `Directory.Build.props` into the root of the project and ensure the contents include the following:
 
 ```
 <Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
@@ -476,7 +476,7 @@ Global Assembly Cache (GAC) dependencies must be made available in the build out
 </Project>
 ```
 
-Then, run cdxgen dotnet9 image `ghcr.io/cyclonedx/cdxgen-debian-dotnet9:v11` with the `--deep` argument.
+Then, run cdxgen cli with the `--deep` argument.
 
 ## License
 

ci/base-images/README.md

@@ -129,7 +129,7 @@ docker run --rm -e CDXGEN_DEBUG_MODE=debug -v /tmp:/tmp -v $(pwd):/app:rw -t ghc
 
 For `dotnet` and `dotnet-framework`, SBOM could include components without a version number. Often, these components begin with the prefix `System.`.
 
-Global Assembly Cache (GAC) dependencies must be made available in the build output of the project for version detection. A simple way to have the dotnet build copy the GAC dependencies into the build directory is to place the file `Directory.Build.props` into the root of the project and ensure the contents include the following:
+Global Assembly Cache (GAC) dependencies (System Runtime dependencies) must be made available in the build output of the project for version detection. A simple way to have the dotnet build copy the GAC dependencies into the build directory is to place the file `Directory.Build.props` into the root of the project and ensure the contents include the following:
 
 ```
 <Project xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
@@ -141,7 +141,7 @@ Global Assembly Cache (GAC) dependencies must be made available in the build out
 </Project>
 ```
 
-Then, run cdxgen dotnet9 image `ghcr.io/cyclonedx/cdxgen-debian-dotnet9:v11` with the `--deep` argument.
+Then, run cdxgen cli with the `--deep` argument.
 
 ### Python applications
 

lib/helpers/utils.js

@@ -8892,13 +8892,15 @@ export function parseCsProjData(csProjData, projFile, pkgNameVersions = {}) {
             }
             if (!gacVersionWarningShown && pkg.name.startsWith("System.")) {
               gacVersionWarningShown = true;
-              console.log("*** Found system packages without version ***");
+              console.log("*** Found system packages without a version ***");
               console.log(
-                "Global Assembly Cache (GAC) dependencies must be made available in the build output of the project for version detection.",
-              );
-              console.log(
-                "Please follow the instructions in the readme: https://github.com/CycloneDX/cdxgen?tab=readme-ov-file#including-net-global-assembly-cache-dependencies-in-the-results. Run cdxgen dotnet9 container image 'ghcr.io/cyclonedx/cdxgen-debian-dotnet9:v11' with '--deep' argument.",
+                "Global Assembly Cache (GAC) dependencies must be included in the project's build output for version detection. Please follow the instructions in the README: https://github.com/CycloneDX/cdxgen?tab=readme-ov-file#including-net-global-assembly-cache-dependencies-in-the-results.",
               );
+              if (process.env?.CDXGEN_IN_CONTAINER === "true") {
+                console.log(
+                  "NOTE: cdxgen must be run in CLI mode from an environment identical to the production environment. Otherwise, the reported version numbers will correspond to the cdxgen container image instead of the target version!",
+                );
+              }
             }
           }
         }