[go: up one dir, main page]

Skip to content

cyclonedx 1.6 support

name: Bug Report
about: Create a report to help us improve
  • Version:
$ hoppr-cop --version
HopprCop Version        : v1.4.6
Python Version          : 3.12.7
  • Platform: container
$ hoppr-cop --format table  --format html --format cyclone_dx --format gitlab --output-dir ./reports busybox_latest.json
DeprecationWarning: Use shutil.which instead of find_executable
GrypeScanner is activated
TrivyScanner is activated
OSSIndexScanner is not activated because required environment variables are not set:
OSS_INDEX_TOKEN, OSS_INDEX_USER
GemnasiumScanner: Database file is up to date
GemnasiumScanner is activated
processing busybox_latest.json
busybox_latest.json is an unknown spec version (1.6)
unexpected error:
$ git grep -C2 'unknown spec version'
hopprcop/utils.py-
hopprcop/utils.py-    if spec_version not in {"1.2", "1.3", "1.4", "1.5"}:
hopprcop/utils.py:        typer.secho(f"{sbom_info} is an unknown spec version ({spec_version})")
hopprcop/utils.py-        raise typer.Exit
hopprcop/utils.py-

Tried to just adjust line to accept 1.6 as well, since the included cyclonedx project @0.6.0 says it has support, but there is more to do.