Skip to content

Issues: microsoft/sbom-tool

Beta
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clear current search query, filters, and sorts
46 Open 210 Closed
46 Open 210 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

[Microsoft.Sbom.Targets] Doesn't find files in Artifacts output layout .NET Pull requests that update .net code
#715 opened Sep 19, 2024 by KalleOlaviNiemitalo
Stale values in repeated validation help wanted Extra attention is needed tabled We like this idea, but we are not going to action on it in the moment
#480 opened Jan 12, 2024 by jlperkins
ScanManifest_(timestamp).json file collision help wanted Extra attention is needed tabled We like this idea, but we are not going to action on it in the moment
#495 opened Feb 6, 2024 by AArnott
1
SBOM Validation - couldn't find a sign validator for the current OS accepted We are working on this and hope to release it into the product
#531 opened Mar 25, 2024 by fkaty
@jlperkins
SPDX version 2.3 support tabled We like this idea, but we are not going to action on it in the moment
#537 opened Apr 4, 2024 by neo42man
9
Dependencies in manifest are a flat list instead of graph for .NET Solution tabled We like this idea, but we are not going to action on it in the moment
#585 opened May 28, 2024 by Tram13
1
SBOM API will show information logs when verbosity is set to be more restrictive tabled We like this idea, but we are not going to action on it in the moment
#616 opened Jul 17, 2024 by gustavoaca1997
1
1
.NET integration follow-up considerations .NET Pull requests that update .net code
#693 opened Aug 30, 2024 by JonDouglas
4 of 13 tasks
16
Add Logging Localization Support .NET Pull requests that update .net code
#708 opened Sep 19, 2024 by JonDouglas
Implement Consistent Path Normalization Across sbom-tool tabled We like this idea, but we are not going to action on it in the moment
#709 opened Sep 19, 2024 by JonDouglas
Support for Response Files in CLI await community interest Looking for further community engagement on this topic before further action tabled We like this idea, but we are not going to action on it in the moment
#710 opened Sep 19, 2024 by JonDouglas
Support for Command Line Argument Passthrough .NET Pull requests that update .net code
#711 opened Sep 19, 2024 by JonDouglas
Use ILogger<T> from Microsoft.Extensions.Logging instead of ILogger from Serilog tabled We like this idea, but we are not going to action on it in the moment
#284 opened Jun 28, 2023 by JamieMagee
3
SBOM Task Outputs Directly to Console Instead of Using MSBuild Logging APIs .NET Pull requests that update .net code
#712 opened Sep 19, 2024 by JonDouglas
1
6
[Microsoft.Sbom.Targets] Generate SbomGenerationPackageVersion with Nerdbank.GitVersioning .NET Pull requests that update .net code
#716 opened Sep 19, 2024 by KalleOlaviNiemitalo
1
[Microsoft.Sbom.Targets] Include SBOM in this package .NET Pull requests that update .net code
#717 opened Sep 19, 2024 by KalleOlaviNiemitalo
[Microsoft.Sbom.Targets] License detection properties have no effect .NET Pull requests that update .net code
#718 opened Sep 19, 2024 by KalleOlaviNiemitalo
Support German BSI TR-03183 2.0.0 by supporting SPDX 2.2.1 or higher accepted We are working on this and hope to release it into the product
#738 opened Oct 7, 2024 by bact
1
@THEJRRR
3
[Microsoft.Sbom.Targets] Rename internal MSBuild properties to minimize risk of conflicts help wanted Extra attention is needed .NET Pull requests that update .net code
#800 opened Nov 15, 2024 by KalleOlaviNiemitalo
3
PIP Comp Detect Adapter - No License or Supplier information tabled We like this idea, but we are not going to action on it in the moment
#802 opened Nov 15, 2024 by samuelc7
@THEJRRR
1
Support Ubuntu Chisel manifests as an sbom input needs investigation Our team will investigate and determine next actions
#811 opened Nov 21, 2024 by richlander
@THEJRRR
2
Lack of a "proper" Github Action prevents pinning to specific versions as hardening advice recomments. tabled We like this idea, but we are not going to action on it in the moment
#820 opened Dec 3, 2024 by blowdart
2
The Maven dependencies graph is different from other package managers accepted We are working on this and hope to release it into the product
#827 opened Dec 6, 2024 by kennylam91
@JoseRenan
6
Conflict when a package is both direct and transitive accepted We are working on this and hope to release it into the product
#833 opened Dec 13, 2024 by kennylam91
@JoseRenan
Calling SbomValidator.ValidateSbomAsync With Directory As OutputPath Returns False Positive
#1093 opened May 29, 2025 by rdgillespie
ProTip! Adding no:label will show everything without a label.