Skip to content

Issues: microsoft/sbom-tool

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

39 Open 206 Closed
39 Open 206 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

SBOM API - Support for AdditionalComponentDetectorArgs help wanted Extra attention is needed
#991 opened Mar 26, 2025 by MichielOda
1
Investigate root cause of SBOMs from the Dark Ages help wanted Extra attention is needed
#989 opened Mar 24, 2025 by alisonlomaka
6
Allow Microsoft.ManifestTool -bl option to read files from any directory needs investigation Our team will investigate and determine next actions
#988 opened Mar 20, 2025 by matteo-prosperi
@THEJRRR
[Microsoft.Sbom.Targets] Add target for publish .NET Pull requests that update .net code tabled We like this idea, but we are not going to action on it in the moment
#983 opened Mar 19, 2025 by DelphinRP
5
SBOM generation skips SPDX 3.0 documents when looking for external document references accepted We are working on this and hope to release it into the product
#981 opened Mar 18, 2025 by pragnya17
@pragnya17
1
Microsoft.Sbom.Adapters missing an adapter for new component detection component 'dotnet' accepted We are working on this and hope to release it into the product
#972 opened Mar 12, 2025 by pgunasekara
2
Package SBOMs are included in SBOM files section accepted We are working on this and hope to release it into the product
#956 opened Mar 3, 2025 by sfoslund
@pragnya17
SBOM API project is tightly coupled with parsers, breaking encapsulation needs investigation Our team will investigate and determine next actions
#949 opened Feb 26, 2025 by pragnya17
@DaveTryon
Generating SBOM with NuGet (Microsoft.Sbom.Targets) on MacoSX results in intermittent hangs needs investigation Our team will investigate and determine next actions
#946 opened Feb 23, 2025 by moljac
@sfoslund
2
License information may not be fully recorded needs customer input Awaiting input from user before proceeding
#944 opened Feb 21, 2025 by schuhbsi
4
[Microsoft.Sbom.Targets] Generates the wrong .nupkg file name and cannot find it. await community interest Looking for further community engagement on this topic before further action tabled We like this idea, but we are not going to action on it in the moment
#920 opened Feb 4, 2025 by philipp-naused
10
Provide better documentation around usage/integration into various pipelines needs investigation Our team will investigate and determine next actions
#909 opened Jan 29, 2025 by michael-hawker
@THEJRRR
1
Feature request: Allow caching when running SBOM multiple times on the same commit needs investigation Our team will investigate and determine next actions
#907 opened Jan 28, 2025 by DaveTryon
@THEJRRR
1
SBOM tool always includes package entry when .nuspec file is found needs investigation Our team will investigate and determine next actions
#866 opened Jan 14, 2025 by jalkire
@jalkire
Conflict when a package is both direct and transitive accepted We are working on this and hope to release it into the product
#833 opened Dec 13, 2024 by kennylam91
@JoseRenan
The Maven dependencies graph is different from other package managers accepted We are working on this and hope to release it into the product
#827 opened Dec 6, 2024 by kennylam91
@JoseRenan
6
Lack of a "proper" Github Action prevents pinning to specific versions as hardening advice recomments. tabled We like this idea, but we are not going to action on it in the moment
#820 opened Dec 3, 2024 by blowdart
2
Support Ubuntu Chisel manifests as an sbom input needs investigation Our team will investigate and determine next actions
#811 opened Nov 21, 2024 by richlander
@THEJRRR
2
PIP Comp Detect Adapter - No License or Supplier information tabled We like this idea, but we are not going to action on it in the moment
#802 opened Nov 15, 2024 by samuelc7
@THEJRRR
1
[Microsoft.Sbom.Targets] Rename internal MSBuild properties to minimize risk of conflicts help wanted Extra attention is needed .NET Pull requests that update .net code
#800 opened Nov 15, 2024 by KalleOlaviNiemitalo
3
Support German BSI TR-03183 2.0.0 by supporting SPDX 2.2.1 or higher accepted We are working on this and hope to release it into the product
#738 opened Oct 7, 2024 by bact
1
@THEJRRR
3
[Microsoft.Sbom.Targets] License detection properties have no effect .NET Pull requests that update .net code
#718 opened Sep 19, 2024 by KalleOlaviNiemitalo
[Microsoft.Sbom.Targets] Include SBOM in this package .NET Pull requests that update .net code
#717 opened Sep 19, 2024 by KalleOlaviNiemitalo
[Microsoft.Sbom.Targets] Generate SbomGenerationPackageVersion with Nerdbank.GitVersioning .NET Pull requests that update .net code
#716 opened Sep 19, 2024 by KalleOlaviNiemitalo
1
[Microsoft.Sbom.Targets] Doesn't find files in Artifacts output layout .NET Pull requests that update .net code
#715 opened Sep 19, 2024 by KalleOlaviNiemitalo
ProTip! Adding no:label will show everything without a label.