cyclonedx-dotnet-library icon indicating copy to clipboard operation
cyclonedx-dotnet-library copied to clipboard
verified publisher icon CycloneDX

Keep first manufacturer in merge

Open ganko-pi opened this issue 6 months ago • 3 comments

Currently all manufacturer are discarded when merging. To improve this behavior the first found manufacturer is kept.

ganko-pi avatar Jul 01 '25 13:07 ganko-pi

Not fully convinced. Isn't the merged BOM a new BOM whose manufacturer could be another organization?

mtsfoni avatar Jul 12 '25 15:07 mtsfoni

Maybe this should be made optional by a flag e.g. --keep-manufacturer.

ganko-pi avatar Jul 14 '25 08:07 ganko-pi

I agree. I have no concern when making it optional.

mtsfoni avatar Jul 27 '25 12:07 mtsfoni