Skip to content

Issues: microsoft/sbom-tool

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

29 Open 190 Closed
29 Open 190 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Conflict when a package is both direct and transitive needs triage Default status upon issue submission
#833 opened Dec 13, 2024 by kennylam91
The Maven dependencies graph is different from other package managers needs triage Default status upon issue submission
#827 opened Dec 6, 2024 by kennylam91
@JoseRenan
2
Support for DEPENDENCY_MANIFEST_OF and DEPENDENCY_OF relationships needs investigation Our team will investigate and determine next actions
#822 opened Dec 4, 2024 by rhyskoedijk
@pragnya17
3
Lack of a "proper" Github Action prevents pinning to specific versions as hardening advice recomments. tabled We like this idea, but we are not going to action on it in the moment
#820 opened Dec 3, 2024 by blowdart
2
Microsoft.Sbom.Targets.E2E.Tests is failing with VS 17.12 accepted We are working on this and hope to release it into the product needs triage Default status upon issue submission
#815 opened Nov 27, 2024 by DaveTryon
@sfoslund
1
Support Ubuntu Chisel manifests as an sbom input needs investigation Our team will investigate and determine next actions
#811 opened Nov 21, 2024 by richlander
1
PIP Comp Detect Adapter - No License or Supplier information needs investigation Our team will investigate and determine next actions
#802 opened Nov 15, 2024 by samuelc7
[Microsoft.Sbom.Targets] Rename internal MSBuild properties to minimize risk of conflicts help wanted Extra attention is needed .NET Pull requests that update .net code
#800 opened Nov 15, 2024 by KalleOlaviNiemitalo
3
Revert #758 when we pick up component-detection 5.1.6 or newer accepted We are working on this and hope to release it into the product
#782 opened Nov 11, 2024 by DaveTryon
Support German BSI TR-03183 2.0.0 by supporting SPDX 2.2.1 or higher needs investigation Our team will investigate and determine next actions
#738 opened Oct 7, 2024 by bact
1
@THEJRRR
1
[Microsoft.Sbom.Targets] License detection properties have no effect .NET Pull requests that update .net code
#718 opened Sep 19, 2024 by KalleOlaviNiemitalo
[Microsoft.Sbom.Targets] Include SBOM in this package .NET Pull requests that update .net code
#717 opened Sep 19, 2024 by KalleOlaviNiemitalo
[Microsoft.Sbom.Targets] Generate SbomGenerationPackageVersion with Nerdbank.GitVersioning .NET Pull requests that update .net code
#716 opened Sep 19, 2024 by KalleOlaviNiemitalo
1
[Microsoft.Sbom.Targets] Doesn't find files in Artifacts output layout .NET Pull requests that update .net code
#715 opened Sep 19, 2024 by KalleOlaviNiemitalo
SBOM Task Outputs Directly to Console Instead of Using MSBuild Logging APIs .NET Pull requests that update .net code
#712 opened Sep 19, 2024 by JonDouglas
6
Support for Command Line Argument Passthrough .NET Pull requests that update .net code
#711 opened Sep 19, 2024 by JonDouglas
Support for Response Files in CLI await community interest Looking for further community engagement on this topic before further action tabled We like this idea, but we are not going to action on it in the moment
#710 opened Sep 19, 2024 by JonDouglas
Implement Consistent Path Normalization Across sbom-tool tabled We like this idea, but we are not going to action on it in the moment
#709 opened Sep 19, 2024 by JonDouglas
Add Logging Localization Support .NET Pull requests that update .net code
#708 opened Sep 19, 2024 by JonDouglas
.NET integration follow-up considerations .NET Pull requests that update .net code
#693 opened Aug 30, 2024 by JonDouglas
4 of 13 tasks
16
SBOM API will show information logs when verbosity is set to be more restrictive tabled We like this idea, but we are not going to action on it in the moment
#616 opened Jul 17, 2024 by gustavoaca1997
1
Dependencies in manifest are a flat list instead of graph for .NET Solution tabled We like this idea, but we are not going to action on it in the moment
#585 opened May 28, 2024 by Tram13
1
Timeout when fetching license information await community interest Looking for further community engagement on this topic before further action
#584 opened May 27, 2024 by erri120
5
SPDX version 2.3 support tabled We like this idea, but we are not going to action on it in the moment
#537 opened Apr 4, 2024 by neo42man
9
SBOM Validation - couldn't find a sign validator for the current OS accepted We are working on this and hope to release it into the product
#531 opened Mar 25, 2024 by fkaty
@jlperkins
ProTip! no:milestone will show everything without a milestone.