Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Retain and validate parent component better #1561

Merged
merged 3 commits into from
Jan 15, 2025
Merged

Conversation

prabhu
Copy link
Collaborator

@prabhu prabhu commented Jan 14, 2025

Fixes #1550

bom.json

@malice00
Copy link
Contributor

Looks good.

However, I found that there can now be duplicate components, since the sub-components of the gradle SBOM are added to the parentComponent, without them being removed from the component they were originally attached to. Working on a fix now -- shouldn't take to long.

@malice00
Copy link
Contributor

Unfortunately, I can't directly push to this repo, so I added your branch with my additions here: https://github.com/malice00/cdxgen/tree/fix/issue-1550-part2

…nents from the parentComponent for a language/packager in multiX-BOMs

Signed-off-by: Roland Asmann <[email protected]>
Signed-off-by: Prabhu Subramanian <[email protected]>
@prabhu
Copy link
Collaborator Author

prabhu commented Jan 15, 2025

Applied your patch. Can you do one final check?

@malice00
Copy link
Contributor

lgtm!

@prabhu prabhu merged commit 2887764 into master Jan 15, 2025
24 checks passed
@prabhu prabhu deleted the fix/issue-1550-part2 branch January 15, 2025 00:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Multi-language SBOM is missing components
2 participants