Hi,
The web tool is currently using CycloneDX.Utils and CycloneDX.Spdx.Interop at version 10.0.0, which ships with an outdated SPDX schema. This causes valid CycloneDX BOMs to fail validation.
Additionally, validation error messages reference the main branch schema URLs instead of using the schema version bundled with the library. This may be an upstream issue in the CycloneDX library itself.
Proposed Changes
- Upgrade
CycloneDX.Utils and CycloneDX.Spdx.Interop from 10.0.0 to 10.0.2, which includes SPDX schema 3.26.0
(source)
Thank you,
Agustin Groh