Moving this thread to the spdx-tech list.   The main spdx mail list is
supposed to be low volume, for announcements.

The developers at github are working to address the issues, let's give them
some time to roll out fixes.


On Thu, Mar 30, 2023 at 1:02 PM Anthony Harrison <
[email protected]> wrote:

> I have experimented with it and have the following observations:
>
> 1. All license information is marked as NOASSERTION (all files in the Git
> Repo have SPDX license ids in the files)
> 2. There are no relationships defined
> 3.
>
> 1. It is not NTIA compliant
>
> On Thu, 30 Mar 2023 at 17:51, William Bartholomew (CELA) via
> lists.spdx.org <[email protected]> wrote:
>
>> We raised the first issue with them yesterday and they are working on it.
>> Do you have more detail on the second?
>>
>> Get Outlook for iOS <https://aka.ms/o0ukef>
>> ------------------------------
>> *From:* [email protected] <[email protected]> on behalf of Vargenau,
>> Marc-Etienne (Nokia - FR/Paris-Saclay) via lists.spdx.org
>> <[email protected]>
>> *Sent:* Thursday, March 30, 2023 9:32:24 AM
>> *To:* [email protected] <[email protected]>
>> *Cc:* Marc-Etienne Vargenau (Nokia) <[email protected]>
>> *Subject:* [EXTERNAL] Re: [spdx] GitHub blogged they are creating SBOMs
>> in SPDX format
>>
>> You don't often get email from marc-etienne.vargenau=
>> [email protected]. Learn why this is important
>> <https://aka.ms/LearnAboutSenderIdentification>
>>
>> Hi,
>>
>>
>>
>> I did some quick tests.
>>
>> I always get invalid SPDX, mostly with “Empty license expression” and
>> “No SPDX element found for SPDX ID”  flagged by the validator.
>>
>>
>>
>> Does anyone know where to file bugs?
>>
>>
>>
>> Best regards,
>>
>>
>>
>> Marc-Etienne
>>
>>
>>
>> *From:* [email protected] <[email protected]> *On Behalf Of *Manbeck,
>> Jack via lists.spdx.org
>> *Sent:* Wednesday, March 29, 2023 10:01 PM
>> *To:* SPDX-general <[email protected]>
>> *Subject:* [spdx] GitHub blogged they are creating SBOMs in SPDX format
>>
>> Looks like GitHub has a self-service option to create SBOMs for a GitHub
>> Project based on SPDX!
>>
>> See this blog
>> <https://github.blog/2023-03-28-introducing-self-service-sboms/> from
>> them.
>>
>>
>>
>> Best Regards,
>>
>>
>>
>> Jack Manbeck
>>
>> Outreach Chair
>>
>>
>>
>>
>>
>> 
>
>


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#5055): https://lists.spdx.org/g/Spdx-tech/message/5055
Mute This Topic: https://lists.spdx.org/mt/97956909/21656
Group Owner: [email protected]
Unsubscribe: 
https://lists.spdx.org/g/Spdx-tech/leave/2656181/21656/1901338254/xyzzy 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to