cyclonedx 1.6 support
name: Bug Report
about: Create a report to help us improve
- Version:
$ hoppr-cop --version
HopprCop Version : v1.4.6
Python Version : 3.12.7
- Platform: container
$ hoppr-cop --format table --format html --format cyclone_dx --format gitlab --output-dir ./reports busybox_latest.json
DeprecationWarning: Use shutil.which instead of find_executable
GrypeScanner is activated
TrivyScanner is activated
OSSIndexScanner is not activated because required environment variables are not set:
OSS_INDEX_TOKEN, OSS_INDEX_USER
GemnasiumScanner: Database file is up to date
GemnasiumScanner is activated
processing busybox_latest.json
busybox_latest.json is an unknown spec version (1.6)
unexpected error:
$ git grep -C2 'unknown spec version'
hopprcop/utils.py-
hopprcop/utils.py- if spec_version not in {"1.2", "1.3", "1.4", "1.5"}:
hopprcop/utils.py: typer.secho(f"{sbom_info} is an unknown spec version ({spec_version})")
hopprcop/utils.py- raise typer.Exit
hopprcop/utils.py-
Tried to just adjust line to accept 1.6 as well, since the included cyclonedx project @0.6.0 says it has support, but there is more to do.