Getting an Empty SBOM when running cdxgen with exclude-type parameter

[MohammedAziz02]

Hi, I'm trying to run cdxgen on this project,
java-js-project.zip, a java project with two subproject one for javascript and another for java. when I run the command : 'cdxgen --spec-version 1.4 -o SBOM.json --exclude-type github',
I got an empty SBOM
SBOM.json, please why this is happening?

[MohammedAziz02]

@prabhu

[MohammedAziz02]

@prabhu what can be the command to run cdxgen on a multiproject and exclude some types, without having empty SBOM ?

[prabhu]

Added a fix for this in this PR. Please perform npm install from within the JSProject directory before running cdxgen. Attached is the new SBOM created from the PR branch.

bom.json

[prabhu]

@MohammedAziz02 did you try the latest cdxgen?

[MohammedAziz02]

@prabhu yes I tried, now I have a non Empty SBOM, but it still doesn't include all ecosystems :
I have this project Structure :
Project :
----- subProject JS :
---------- package.json
----- subProject Maven :
----------- pom.xml
pom.xml

but the SBOM doesn't have any js dependencies :
SBOM-10.10.3.json

[prabhu]

Can you perform npm install as per my original instruction?