Invalid sbom json

[ObraztsovOleg]

When I merge two sboms:

1. sbom.json
   { "bomFormat": "CycloneDX", "specVersion": "1.4", "serialNumber": "urn:uuid:5c3bf41b-655c-47e1-9a10-867f270bb393", "version": 1, "metadata": { "timestamp": "2024-04-16T08:41:32.770Z", "tools": [ { "vendor": "cyclonedx", "name": "cdxgen", "version": "8.6.2" } ], "authors": [ { "name": "Prabhu Subramanian", "email": "[email protected]" } ] }, "components": [], "services": [], "dependencies": [] }

2. sbom.json
   { "bomFormat": "CycloneDX", "specVersion": "1.4", "serialNumber": "urn:uuid:af178b8a-e4a8-47f7-b36f-40b789da47b8", "version": 1, "metadata": { "timestamp": "2024-04-16T08:41:32.770Z", "tools": [ { "vendor": "cyclonedx", "name": "cdxgen", "version": "8.6.2" } ], "authors": [ { "name": "Prabhu Subramanian", "email": "[email protected]" } ] }, "components": [], "services": [], "dependencies": [] }

I got invalid output sbom.json:
{ "bomFormat": "CycloneDX", "specVersion": "1.5", "serialNumber": "urn:uuid:ba2b30f1-be8f-44c9-aa02-fc53f28c2a1f", "version": 1, "metadata": { "tools": [ { "vendor": "cyclonedx", "name": "cdxgen", "version": "8.6.2" } ], "component": { "type": "application", "group": "sbt_PROD.CI90000027_digs", "name": "digs", "version": "5.21.4-1416" } }, "components": [], "services": [], "dependencies": [] }ncies": [] }

[ertl]

+1

[andreas-hilti]

@ObraztsovOleg Could it be that the sbom.json existed and you tried to overwrite it?
If this is the case, then it would be a duplicate of #255.

[mtsfoni]

"dependencies": [] }ncies": [] }

Looks strongly like #255.

If you still encounter the issue in the newest version, please feel free to reopen this issue or create a new one.