@cyclonedx/cdxgen 8.5.1 → 8.5.3

package/index.js

@@ -1061,9 +1061,21 @@ const createJavaBom = async (path, options) => {
             console.log(
               "Resolve the above maven error. This could be due to the following:\n"
             );
-            console.log(
-              "1. Java version requirement: cdxgen container image bundles Java 17 with maven 3.8 which might be incompatible."
-            );
+            if (
+              result.stderr &&
+              result.stderr.includes(
+                "Could not resolve dependencies" ||
+                  result.stderr.includes("no dependency information available")
+              )
+            ) {
+              console.log(
+                "1. Try building the project with 'mvn package -Dmaven.test.skip=true' using the correct version of Java and maven before invoking cdxgen."
+              );
+            } else {
+              console.log(
+                "1. Java version requirement: cdxgen container image bundles Java 17 with maven 3.8 which might be incompatible."
+              );
+            }
             console.log(
               "2. Private dependencies cannot be downloaded: Check if any additional arguments must be passed to maven and set them via MVN_ARGS environment variable."
             );
@@ -1175,7 +1187,6 @@ const createJavaBom = async (path, options) => {
         parentComponent = {
           name: rootProject,
           type: "application",
-          qualifiers: { type: "jar" },
           ...(retMap.metadata || {})
         };
         const parentPurl = decodeURIComponent(
@@ -1184,7 +1195,7 @@ const createJavaBom = async (path, options) => {
             parentComponent.group || "",
             parentComponent.name,
             parentComponent.version,
-            parentComponent.qualifiers,
+            { type: "jar" },
             null
           ).toString()
         );
@@ -1236,12 +1247,10 @@ const createJavaBom = async (path, options) => {
     }
     if (gradleFiles && gradleFiles.length && options.installDeps) {
       let gradleCmd = utils.getGradleCommand(path, null);
-      if (!allProjects || !allProjects.length) {
-        allProjects.push(parentComponent);
-      }
+      allProjects.push(parentComponent);
       for (let sp of allProjects) {
         let gradleDepArgs = [
-          sp.name === parentComponent.name
+          sp.purl === parentComponent.purl
             ? "dependencies"
             : `:${sp.name}:dependencies`,
           "-q",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cyclonedx/cdxgen",
-  "version": "8.5.1",
+  "version": "8.5.3",
   "description": "Creates CycloneDX Software Bill-of-Materials (SBOM) from source or container image",
   "homepage": "http://github.com/cyclonedx/cdxgen",
   "author": "Prabhu Subramanian <prabhu@appthreat.com>",