If there is no space after the colon after the json tag prefix, a parsing error occurs.

[warpkwd]

If there is no space after the colon after the json tag prefix, a parsing error occurs.

sbom file is:

  "creationInfo": {
    "created": "2024-12-25T12:00:00Z",
    "creators": [
      "Tool: SPDXExampleTool-1.0",
      "Organization: ExampleOrg",
      "Person:John Doe (john.doe@example.com)"   <- no space after colon
    ]

sbomqs is:

sbomqs compliance -D -c sample.json
failed to get sbom document for sample.json
Error: failed to parse Creator 'Person:John Doe (john.doe@example.com)'

2024-12-25T20:17:28.828+0900    DEBUG   engine/compliance.go:30 engine.ComplianceRun()
2024-12-25T20:17:28.829+0900    DEBUG   engine/compliance.go:36 Config: &{Path:[sample.json] Categories:[] Features:[] JSON:false Basic:false Detailed:false Pdf:false Spdx:false Cdx:false Recurse:false Debug:true ConfigPath: Ntia:false Bsi:true BsiV2:false Oct:false Fsct:false Color:false}
2024-12-25T20:17:28.829+0900    DEBUG   engine/compliance.go:86 engine.getSbomDocument()
2024-12-25T20:17:28.829+0900    DEBUG   sbom/sbom.go:176        SBOM detect spec:spdx format:json
2024-12-25T20:17:28.829+0900    DEBUG   engine/compliance.go:135        failed to create sbom document for  :sample.json
[sample.json](https://github.com/user-attachments/files/18245682/sample.json)

2024-12-25T20:17:28.829+0900    DEBUG   engine/compliance.go:136        failed to parse Creator 'Person:John Doe (john.doe@example.com)'

[warpkwd]

sample.json

[viveksahu26]

Thank you for raising this issue. The issue is reproducible and specifically occurs in the creationInfo.creators section.

[warpkwd]

I have already submitted a pull request to spdx/tools-golang about this bug.
Thank you.

[viveksahu26]

It's an upstream issue, already raised by @warpkwd on tools-golang repo: spdx/tools-golang#253

[warpkwd]

My commit appears to have been merged.

[riteshnoronha]

@warpkwd we are still waiting on a new release to made for https://github.com/spdx/tools-golang with your commit.

[warpkwd]

@riteshnoronha
Yes, I don't know why, but they don't update the release tag.