Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

BOM import not refreshing with CycloneDX 1.6 #4363

Open
2 tasks done
DerArkeN opened this issue Nov 8, 2024 · 1 comment
Open
2 tasks done

BOM import not refreshing with CycloneDX 1.6 #4363

DerArkeN opened this issue Nov 8, 2024 · 1 comment
Labels
defect Something isn't working in triage

Comments

@DerArkeN
Copy link

DerArkeN commented Nov 8, 2024

Current Behavior

We had a really weird behaviour within our pipelines.
We noticed that dependencies weren't refreshing anymore, after investigating we noticed, that SBOMs with Schema version 1.5 and below did refresh properly but not with version 1.6. What worked though was deleting a the project and creating the project again using the the CI/CD API. The project was created, but refreshing still didn't work with the newly created project.

Our workaround was setting the version in the cyclonedx-gomod to 1.5 when creating a SBOM.

Steps to Reproduce

  1. Create a new project using this command
  2. Change the SBOM
  3. Run the command again
  4. The last BOM import date does not change, neither the dependcies

Expected Behavior

When rerunning the command from Step 1 the dependcies should refresh

Dependency-Track Version

4.11.x

Dependency-Track Distribution

Container Image

Database Server

PostgreSQL

Database Server Version

No response

Browser

N/A

Checklist

@DerArkeN DerArkeN added defect Something isn't working in triage labels Nov 8, 2024
@DerArkeN DerArkeN changed the title BOM import not refreshing with newest CycloneDX BOM import not refreshing with CycloneDX 1.6 Nov 8, 2024
@kunwaratulhax0r
Copy link

Any update on this? Looks like it's been pending since long time.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
defect Something isn't working in triage
Projects
None yet
Development

No branches or pull requests

2 participants