Andreas Schade
Andreas Schade
### Current Behavior Cyclonedx 1.6 supports CBOMs. CBOMs cannot be processed by DT yet since components of type crypto asset and contained data (crypto properties) are not supported. This requires...
This issue is related to [PR 98](https://github.com/IBM/cbomkit/pull/98). The attempt to scan GitUrl: `https://github.com/numpy/numpy` Branch: `v2.2.0` led to an exception when scanning file https://github.com/numpy/numpy/blob/main/numpy/_core/tests/test_ufunc.py: ``` : java.lang.NumberFormatException: For input string: ".3"...
When scanning `pkg:maven/com.google.guava/[email protected]` we get 12 findings all of which come from [Hashing.java](https://github.com/google/guava/blob/2214c63/guava/src/com/google/common/hash/Hashing.java). All findings refer to locations at the closing '*/' of javadoc comments. One such example is [Hashing.java#L364](https://github.com/google/guava/blob/2214c63/guava/src/com/google/common/hash/Hashing.java#L364-L364)....
When analysing https://github.com/docling-project/docling the python scanner creates FPs on code related to model generation such as ``` python generated_ids = self.vlm_model.generate( **inputs, max_new_tokens=self.max_new_tokens, use_cache=self.use_cache, temperature=self.temperature, ``` This finding comes across...