Dave Tryon comments

Repositories
Issues
Comments

Results 184 comments of


                                            Dave Tryon

External SPDX files appear in the files section

Reopening since it's a different scenario from #956, although probably a common root cause

Add support for DEV_DEPENDENCY_OF Relationship in SPDX 2.2 SBOMs

Implementation note: Our current dependencies are based on the `AncestralReferrers` property of the objects that we receive from component detection. This property is surfaced on the `ScannedComponent` class, which also...

Fix: Exclude package SBOMs outside BuildDropPath from files section

/azp run

Bump packageurl-dotnet from 1.1.0 to 1.3.0

This is a dupe of #327, which was blocked by https://github.com/microsoft/component-detection/pull/1416, which is blocked by https://github.com/package-url/packageurl-dotnet/pull/24. Not sure why dependabot keeps on trying to update this.