-
-
Notifications
You must be signed in to change notification settings - Fork 53
Closed
Description
Example code to produce BOM:
bom = Bom(
components=[Component(
name='setuptools', version='50.3.2', bom_ref='pkg:pypi/[email protected]?extension=tar.gz',
purl=PackageURL(
type='pypi', name='setuptools', version='50.3.2', qualifiers='extension=tar.gz'
), license_str='MIT License', author='Test Author'
)]
)
This attempts to produce XML for the Component as follows:
<component type="library" bom-ref="pkg:pypi/[email protected]?extension=tar.gz">
<name>setuptools</name>
<version>50.3.2</version>
<licenses>
<expression>MIT License</expression>
</licenses>
<cpe>cpe:2.3:a:python:setuptools:50.3.2:*:*:*:*:*:*:*</cpe>
<purl>pkg:pypi/[email protected]?extension=tar.gz</purl>
</component>
.licenses.expression
is not permissible in schema version 1.0.