export Dependency track report with 1.6 CycloneDX version

[MIO1100]

Hello. I want to use some integrations for your tool, and i need to export CycloneDX with 1.6 version. Now I use 4.10.1 version. Do you have a plan to grow 1.5 version to 1.6? Or can i configurate this choice? Have you already done this in the new versions? I didn't find it.

[fupgang]

Hi,

Or can i configurate this choice?

Exporting SBOMs is currently hard coded with version 1.5.

dependency-track/src/main/java/org/dependencytrack/parser/cyclonedx/CycloneDXExporter.java

Lines 96 to 104 in 5235dd8

	public String export(final Bom bom, final Format format) throws GeneratorException {
	// TODO: The output version should be user-controllable.
	if (Format.JSON == format) {
	return BomGeneratorFactory.createJson(Version.VERSION_15, bom).toJsonString();
	} else {
	return BomGeneratorFactory.createXml(Version.VERSION_15, bom).toXmlString();
	}
	}

Right away, I didn't find an issue to reflect the above TODO. Pherhaps you should create one.