Issues

--enable-github-licenses drops the "Unknown - See URL" license fallback when GitHub resolution fails
CycloneDX/cyclonedx-dotnet#1134 · opened on Sep 30, 2026
--exclude-filter deletes shipped packages when two projects resolve a shared dependency to different versions
CycloneDX/cyclonedx-dotnet#1133 · opened on Sep 30, 2026
Orphaned Components
CycloneDX/cyclonedx-dotnet#1132 · opened on Sep 30, 2026
3
--exclude-filter removes RID-specific packages; dependency graph drops edges to them
CycloneDX/cyclonedx-dotnet#1130 · opened on Sep 25, 2026
1
Using a custom packageSourceMapping in the nuget.config breaks generation
CycloneDX/cyclonedx-dotnet#1127 · opened on Sep 14, 2026
--exclude-filter removes all components for any .sln/.slnx/.slnf input, and for single-project input without --recursive
CycloneDX/cyclonedx-dotnet#1126 · opened on Aug 28, 2026
2
'Sequence contains more than one matching element' error when multiple projects reference more than one version of the same package
CycloneDX/cyclonedx-dotnet#1110 · opened on Jul 16, 2026
2
CRA compliance for the SBOM
CycloneDX/cyclonedx-dotnet#1109 · opened on Jul 14, 2026
1
Packages pruned by NuGet Package Pruning disappear from the SBOM
CycloneDX/cyclonedx-dotnet#1108 · opened on Jul 2, 2026
1
--recursive is needed to get all development dependencies
CycloneDX/cyclonedx-dotnet#1107 · opened on Jul 2, 2026
Dependencies of dev dependencies end up in SBOM despite exclude-dev option
CycloneDX/cyclonedx-dotnet#1105 · opened on Jun 25, 2026
2
option to generate one bom per target framework
CycloneDX/cyclonedx-dotnet#1102 · opened on Jun 10, 2026
combining --disable-package-restore and --target-framework (with prior restore) does not work
CycloneDX/cyclonedx-dotnet#1101 · opened on Jun 10, 2026
Is it possible to add the NuGet package source URL to the report
CycloneDX/cyclonedx-dotnet#1097 · opened on May 27, 2026
2
Support for "dll" references (non-nuget) projects in .NET based projects
CycloneDX/cyclonedx-dotnet#997 · opened on Dec 11, 2025
Project reference paths with $(SolutionDir) end up as components
CycloneDX/cyclonedx-dotnet#981 · opened on Oct 30, 2025
2
Project paths parsed from Projects
CycloneDX/cyclonedx-dotnet#978 · opened on Oct 21, 2025
SHA512 hash format of the components
CycloneDX/cyclonedx-dotnet#950 · opened on Jun 2, 2025
Add other type of hash?
CycloneDX/cyclonedx-dotnet#948 · opened on May 24, 2025
1
Unable to load projects in solution, when path contains a variable
CycloneDX/cyclonedx-dotnet#942 · opened on May 2, 2025
2
Include other dependencies than package references
CycloneDX/cyclonedx-dotnet#932 · opened on Feb 27, 2025
2
Can't handle referenced build properties for AssemblyName
CycloneDX/cyclonedx-dotnet#917 · opened on Dec 3, 2024
1
Question: Is there a reason why there is no command line option to sign the generated sbom-file using a given key?
CycloneDX/cyclonedx-dotnet#916 · opened on Nov 19, 2024
9
Incorrect dependency structure on different target framework
CycloneDX/cyclonedx-dotnet#911 · opened on Oct 24, 2024
2
System.IO.IOException: An attempt was made to move the position before the beginning of the stream.
CycloneDX/cyclonedx-dotnet#904 · opened on Sep 2, 2024
7