sbom-tool
sbom-tool copied to clipboard
License information may not be fully recorded
sbom-tool version: 3.1.0
I execute the following command in an Azure Devops pipeline:
sbom-tool generate -b $(Build.ArtifactStagingDirectory) -bc ${{ parameters.workingDirectory }} -pn $(Build.DefinitionName) -pv 1.0.0 -ps sbom -nsb https://sbom.com -li true -V Verbose -D true -lto 90
The following result is returned
Sbom-tool is already installed: 3.1.0
##[debug]Retrieving license information for 408 components took 85,7697623 seconds
##[warning]Encountered error while attempting to parse response. License information may not be fully recorded.
##[information]Found license information for 0 out of 408 unique components.
If I leave out the -lto parameter I get the timeout error
sbom-tool generate -b $(Build.ArtifactStagingDirectory) -bc ${{ parameters.workingDirectory }} -pn $(Build.DefinitionName) -pv 1.0.0 -ps sbom -nsb https://sbom.com -li true -V Verbose -D true
##[debug]Retrieving license information for 408 components...
##[warning]Error encountered while fetching license information from API, resulting SBOM may have incomplete license information: The request was canceled due to the configured HttpClient.Timeout of 30 seconds elapsing.
##[debug]Retrieving license information for 408 components took 30,020855 seconds
But strangely enough, sometimes the licence generation works even if the timeout is not specified