Fix SPDX 3.0 relationship generation by pragnya17 · Pull Request #1015 · microsoft/sbom-tool (original) (raw)

1. SPDX id's for relationships were not being generated correctly. The SPDX id's were used to filter out duplicate relationships, therefore relationships were being incorrectly identified as duplicates and were missing from the final manifest SBOM file.
2. For certain relationship types we were not using the correct directionality as stated by the SPDX specification.

This PR aims to fix how the SPDX id for relationships are generated, so that the ID is truly a unique representation of the content of the relationship. It also fixes the directionality for certain relationship types.