Skip to content

Commit b95840e

Browse files
Update doc/howto/sbom.rst
Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com>
1 parent 54e3ea1 commit b95840e

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

doc/howto/sbom.rst

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -91,9 +91,9 @@ Viewing SBOM in DependencyTrack
9191
`DependencyTrack`_ is a popular open-source SBOM analysis platform that can ingest CycloneDX SBOMs generated by dfetch.
9292

9393
When viewing components with NOASSERTION licenses, the license field shows ``NOASSERTION``, and the properties panel
94-
displays the dfetch license detection metadata. The license detail view remains empty, but the ``acknowledgement`` and
95-
``text`` fields provide human-readable explanations, while the ``dfetch:license:noassertion:reason`` property enables
96-
machine-readable filtering and automation.
94+
displays the dfetch license detection metadata. DependencyTrack's license detail view remains empty for these entries.
95+
The raw CycloneDX payload still carries ``acknowledgement`` and ``text`` for human-readable explanations, while the
96+
``dfetch:license:noassertion:reason`` property enables machine-readable filtering and automation.
9797

9898
.. image:: ../images/dependency-track-properties.png
9999
:alt: Properties view showing dfetch license detection metadata

0 commit comments

Comments
 (0)