You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This data is crucial for risk analysis of vulnerabilities. It would be perfect to add similar property to be able to identify test dependencies in SBOMs collected with Gradle plugin.
The text was updated successfully, but these errors were encountered:
skhokhlov
changed the title
Mark components from test configuration
Mark components from test configurations
May 28, 2024
CycloneDX npm plugin adds properties for components in SBOM which are dev dependencies of the project.
https://github.com/CycloneDX/cyclonedx-node-npm/blob/main/demo/dev-dependencies/example-results/bare/bom.1.6.json#L187-L188
This data is crucial for risk analysis of vulnerabilities. It would be perfect to add similar property to be able to identify test dependencies in SBOMs collected with Gradle plugin.
The text was updated successfully, but these errors were encountered: