DependencyTrack cannot read the sbom of NPM #280

Closed Answered by stevespringett

ninianxing asked this question in Q&A

ninianxing
Nov 3, 2022

Hi,
We have created SBOM of NPM project by cyclonedx-npm and uploaded it to DependencyTrack, but it cannot read the bom.json or bom.xml. It can read the bom.json which created from maven project.
Steps:
1. Install cyclonedx-npm
npm i -g @cyclonedx/cyclonedx-npm
2. Run the command in the workspace of project.
cyclonedx-npm --output-file bom.json
3. Upload the bom.json on the DependencyTrack.
Hope your suggestion. Thanks.

Answered by stevespringett

Can you provide the boms so we can reproduce? If you need to redact some data, that's fine as long as we can reproduce the issue.

View full answer

Replies: 1 comment 3 replies

stevespringett
Nov 3, 2022
Maintainer

Can you provide the boms so we can reproduce? If you need to redact some data, that's fine as long as we can reproduce the issue.

3 replies

ninianxing Nov 3, 2022
Author

Hi,
This is the log of apiserver as follows. It seems the purl is too long. Can I modify the limit of length?

stevespringett Nov 3, 2022
Maintainer

See #225

ninianxing Nov 4, 2022
Author

Thanks a lot.

Answer selected by ninianxing

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment