Roland Asmann

Problem with XMLWriter

2

We are trying to generate BOMs for our Android projects and I am having a hell of a time. After finally figuring out all configs that I have to skip...

CocoaPods can't find local podspecs

8

Analyzing CocoaPods uses `pod spec which` to find the location of a podspec file. Unfortunately CP only resolved the path if the pod is known in (one of) its repositories....

Parts of purls that should be percent-encoded are not correctly encoded

1

I've been working on some issues for [cdxgen](https://github.com/CycloneDX/cdxgen) with generating Gradle purls for projects. My issue is that Gradle prefixes project names with a ':', which should imho not be...

Schema validation error when importing SBOMs that were exported by DT itself

5

### Current Behavior When exporting an SBOM for a project and then trying to import it again, DT gives an exception that the Schema validation failed. ### Steps to Reproduce...

Please implement file export for usage with nmonchart

1

I just started using nomn and nmonchart on my Linux systems and wanted to add my Macs as well. That's how I found this repo. Now, I would like to...

DT resets some (but not all) of my updated components

4

### Current Behavior Some of the components in our projects don't have their license set, so we set those manually to fulfill our companies policies. However, after running another import,...

Affected project in mail-notification doesn't show name

3

### Current Behavior When DT sends a mail about vulnerable dependencies or new vulnerabilities, all references to this project use the purl of the root component instead of the actual...

Limit notifications to portfolio(s) instead of/alongside projects

2

### Current Behavior Currently notifications can only be limited to projects. This means that any new project has to be added in the notification manually (unless no limits are set...

### Current Behavior We have a project that uses React Native, where the base dependencies are NPM. Inside them are Gradle and CocoaPods modules which are referenced inside the respective...

[Feature] Add option to resolve Pods that are actually Node-Modules

4

We are using Expo & React Native to build apps. We've been generating and importing our SBOMs for some time and kept finding it strange that Dependency-Track never showed any...