cyclonedx-rust-cargo icon indicating copy to clipboard operation
cyclonedx-rust-cargo copied to clipboard
verified publisher icon CycloneDX

Allow access to the spec version

Open ctron opened this issue 2 years ago • 2 comments

Currently, after parsing an SBOM. The specVersion field is not available.

However, what might happen is that the 1.3 parser parses a 1.4 version successfully. However, without reparsing and inspecting the raw JSON (or XML), it seems impossible to check if this was actually a 1.3 or 1.4 document. Which might be necessary to know in some cases.

I can come up with a PR for this if that helps.

ctron avatar Aug 01 '23 13:08 ctron

Hey! I'm helping maintain the repo now. This seems like a reasonable addition, I would be happy to accept a PR that exposes the field if this is still relevant.

Shnatsel avatar Oct 27 '23 18:10 Shnatsel

Hi @ctron ,

sorry for the late reply, do you think the change in PR #583 covers your use case?

justahero avatar Apr 04 '24 08:04 justahero