-
Incident report
-
Resolution: Duplicate
-
Trivial
-
None
-
7.0.0alpha2
-
None
While generating SBOMs for the Go agent via the cylconedx-gomod utility, with license detection, it emits a warning that the module doesn't include a license:
% cyclonedx-gomod mod \ -output-version 1.4 \ -licenses -assert-licenses -json -output "sbom.json" 3:29PM WRN no licenses detected [email protected]
The Go project have a general policy for how a license should be specified for a module, which should be followed to allow tools for reliable license detection. The policy can be found here.
Additionally, it seems that the agent module doesn't have a name, except a vendor string zabbix.com, which makes it ambiguous.
- duplicates
-
ZBX-22854 Go module missing license file, identifiers
- Closed