Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 9 additions & 7 deletions ChangeLog.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,6 +14,7 @@
* fix: `bom show` and `bom validate` read SBOMs in UTF-8 encoding.
* `getdependencies javascript` has an improved source code detection.
* Improve filtering in `bom filter`.
* Update to Poetry 2.1.4 including an update of `pyproject.toml`.

## 2.9.1

Expand Down Expand Up @@ -173,10 +174,10 @@
* Warnings about multiple purls entries when running `bom map` are now only shown if `-v` has been specified.
* breaking change
* `bom map` will report matches by name, but different version **only** if `-all` has been specified.
The original idea of CaPyCLI was to report as many potential matches as possible and to let the user
decide which match to take by editing the SBOM. But it seems that many users did not read the documentation
and the expectations were different. Therefore the default behavior has been changed.
The original behavior of versions prior to 2.x can be enabled via the `-all` switch.
The original idea of CaPyCLI was to report as many potential matches as possible and to let the
user decide which match to take by editing the SBOM. But it seems that many users did not read
the documentation and the expectations were different. Therefore the default behavior has been
changed. The original behavior of versions prior to 2.x can be enabled via the `-all` switch.

## 2.0.0.dev (2023-05-19)

Expand Down Expand Up @@ -205,7 +206,8 @@
* `all` instead of 0
* `found` instead of 1
* `notfound` instead of 2
* dropped support for option `-stage`. The SW360 server instance can get specified via the `-url` parameter.
* dropped support for option `-stage`. The SW360 server instance can get specified via the
`-url` parameter.
* The hard coded address https://sw360.siemens.com has been removed.
CaPyCLI reads the SW360 server address either from the environment variable `SW360ServerUrl` or
via the `-url` parameter.
Expand Down Expand Up @@ -274,8 +276,8 @@
* CycloneDX JSON BOMs are expected in UTF-8 encoding.
* `bom map` has now a much faster way to create/update the cache. Due to the new SW360 REST API
endpoint to get all releases with one call it now takes only 1.3 minutes.
* `project vulnerabilities` is working again. It seems that there was a breaking change in the REST API
answer.
* `project vulnerabilities` is working again. It seems that there was a breaking change in the
REST API answer.

## 1.8.0 (2022-04-07)

Expand Down
7 changes: 4 additions & 3 deletions examples.md
Original file line number Diff line number Diff line change
Expand Up @@ -662,9 +662,10 @@ done.

There are two commands:

`bom createreleases` creates new releases for existing components, but will skip non-existing components.
By default, it requires "ComponentId" information in the SBOM (added by `bom map` for a package-url match,
see discussion there). This is usually a quite safe operation which can be used in CI pipelines.
`bom createreleases` creates new releases for existing components, but will skip non-existing
components. By default, it requires "ComponentId" information in the SBOM (added by `bom map`
for a package-url match, see discussion there). This is usually a quite safe operation which
can be used in CI pipelines.

`bom createcomponents`, in contrast, will automatically add every unmapped entry in your SBOM to SW360
(only performing very basic checks to not create exact duplicates) -- so this shall only be used after
Expand Down
Loading