Repository navigation
[Discussion] Rationale for requiring Concluded license while Declared license is optional #119
AWatanabe418
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Note: This question is submitted on behalf of an anonymous contributor.
Automotive SBOM requires the Concluded license field, while the Declared license field is optional.
Could you explain the rationale or intent behind this design?
While it is understandable that identifying all relevant licenses is important, there is also a need to keep SBOM generation practical and operationally simple. Clarification on the expected usage and balance between completeness and simplicity would be helpful.
All reactions