Darius Schier comments

Repositories
Issues
Comments

Results 2 comments of


                                            Darius Schier

bug(sbom): Duplicate SBOM packages for multi-module pom.xml files

Not sure if I missed something. WiIll this fix also solve CycloneDX-dependsOn? 🙂 We just encountered similar problems when we tried to import a multi module maven project into dependencyTrack....

bug(sbom): Duplicate SBOM packages for multi-module pom.xml files

I've uploaded a tiny maven project, including the generated sbom. If you search for 'dependsOn', you can see the duplicated entries. [trivy-multimodule.tar.gz](https://github.com/user-attachments/files/22510217/trivy-multimodule.tar.gz) Regards