-
Notifications
You must be signed in to change notification settings - Fork 567
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Java pom.xml , no version #2266
Comments
Hi @bj1116, can you share more information about your environment, what version of Syft you are running, and can you please share the steps and files so that we can reproduce this problem locally? Thanks! |
Please attach the pom.xml file |
@tgerla @coheigea I'm currently running into the same issue with this project. The project builds a docker image via the spring boot maven plugin, which internally uses paketo buildpacks and they on the other hand rely on syft to generate the SBOM. For the most recent build syft This is the SBOM entry that was generated for the
and this is the pom used in that build: https://github.com/idealo/spring-endpoint-exporter Note that the project is relying on the You should be able to reproduce the result by:
You could also just inspect the pre-built docker image that's hosted on github. See also: paketo-buildpacks/spring-boot#421 |
Ah yes there is a gap here when a dependency version is declared in a parent pom. I'll take a look at it. |
Fix submitted here: #2423 It needs the configuration:
|
Thanks, @coheigea. I'll close this issue. Please feel free to open a new one if anyone runs into more trouble. Thanks! |
Java pom.xml , no version .
Example:
pom.xml
syft.exe xxx/
The text was updated successfully, but these errors were encountered: