Skip to content

Conversation

@felickz
Copy link
Contributor

@felickz felickz commented Apr 30, 2025

This documentation appears inaccurate. Based on warnings seen in SBOM tool run there is not support for Maven license information:

##[debug]License retrieval for component type maven is not supported yet.

but it is listed as supported:
image

The only supported ecosystems (this appears to be the only ILicenseInformationFetcher implemenataion) are:

switch (componentType)
{
case "npm":
listOfComponentsForApi.Add($"{componentType}/npmjs/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
case "nuget":
listOfComponentsForApi.Add($"{componentType}/nuget/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
case "gem":
listOfComponentsForApi.Add($"{componentType}/rubygems/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
case "pypi":
listOfComponentsForApi.Add($"{componentType}/pypi/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
case "cargo":
listOfComponentsForApi.Add($"crate/cratesio/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
case "cocoapods":
listOfComponentsForApi.Add($"pod/{componentType}/{clearlyDefinedNamespace}/{componentName}/{componentVersion}");
break;
default:
log.Debug($"License retrieval for component type {componentType} is not supported yet.");
break;
}
}
}

See rendered updates: https://github.com/felickz/sbom-tool/blob/patch-1/docs/feature-overview.md#packages-section

@felickz felickz marked this pull request as ready for review April 30, 2025 16:24
@felickz felickz requested a review from a team as a code owner April 30, 2025 16:24
@DaveTryon
Copy link
Contributor

/azp run

@DaveTryon
Copy link
Contributor

/azp run

@DaveTryon DaveTryon merged commit 0a680ff into microsoft:main May 16, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants