Issues

• -D Generate option should be a switch.

  microsoft/sbom-tool#1538 · Filter by author jamespack opened on Sep 23, 2026

• Action parsing case sensitive

  microsoft/sbom-tool#1537 · Filter by author jamespack opened on Sep 22, 2026

• Support Creation of BSI-Conformant SBOMs

  microsoft/sbom-tool#1531 · Filter by author lookilooki opened on Aug 19, 2026
  5

• Please consider posting Microsofts Issue list for SPDX V 3.1 submitted to the Linux Foundation

  microsoft/sbom-tool#1528 · Filter by author rjb4standards opened on Jul 14, 2026

• Feature Request: Safety Relevance classification support via externalRefs or custom annotations

  microsoft/sbom-tool#1527 · Filter by author devashridatta-dotcom opened on Jun 25, 2026
  2

• Sbom fails to parse lisence from packages

  microsoft/sbom-tool#1511 · Filter by author Stralos opened on May 21, 2026

• Add support for SPDX V 2.3

  microsoft/sbom-tool#1509 · Filter by author rjb4standards opened on May 19, 2026

• SBOM Tool 4.1.5 fails to parse package-lock.json file

  microsoft/sbom-tool#1471 · Filter by author willyt150 opened on Apr 13, 2026
  1

• Is sbom-tool being deprecated?

  microsoft/sbom-tool#1459 · Filter by author KalleOlaviNiemitalo opened on Apr 1, 2026
  4

• Microsoft.Sbom.Targets lists generated package twice in SBOM

  microsoft/sbom-tool#1425 · Filter by author Malcolmnixon opened on Feb 25, 2026
  1

• Add support for customized nuget globalPackagesFolder

  microsoft/sbom-tool#1424 · Filter by author gmnl opened on Feb 24, 2026

• Level up the license detection for nuget packages

  microsoft/sbom-tool#1420 · Filter by author sensslen opened on Feb 17, 2026
  1

• Tool fails on Dotnet 10 with System.InvalidOperationException: The JSON property name for 'Microsoft.ComponentDetection.Contracts.TypedComponent.SwiftComponent.packageUrl' collides with another property.

  microsoft/sbom-tool#1380 · Filter by author rogerbriggen-securiton opened on Jan 6, 2026
  1

• Microsoft.Sbom.Targets SbomGenerationVerbosity property has no effect

  microsoft/sbom-tool#1377 · Filter by author adamralph opened on Jan 4, 2026

• Fatal error when directory path has a valid trailing backslash

  microsoft/sbom-tool#1355 · Filter by author GreaterDane42 opened on Dec 2, 2025

• Request SHA256 is added when linking external SBOMs in the primary SBOM.

  accepted
  microsoft/sbom-tool#1209 · Filter by author nschwerzler opened on Sep 5, 2025

• FileHasher.HashAlgorithmNames is wrong when generating aggregated SBOM

  accepted
  microsoft/sbom-tool#1159 · Filter by author DaveTryon opened on Aug 15, 2025

• Add support for DEV_DEPENDENCY_OF Relationship in SPDX 2.2 SBOMs

  accepted
  microsoft/sbom-tool#1140 · Filter by author nschwerzler opened on Jul 16, 2025
  3

• Our version of AutoMapper has been deprecated

  accepted
  microsoft/sbom-tool#1107 · Filter by author DaveTryon opened on Jun 25, 2025
  5

• Calling SbomValidator.ValidateSbomAsync With Directory As OutputPath Returns False Positive

  accepted
  microsoft/sbom-tool#1093 · Filter by author rdgillespie opened on May 29, 2025
  5

  

• External SPDX files appear in the files section

  accepted
  microsoft/sbom-tool#1090 · Filter by author DaveTryon opened on May 28, 2025
  3

  

• Can we handle case-variant names in the same folder?

  accepted
  microsoft/sbom-tool#1089 · Filter by author DaveTryon opened on May 26, 2025
  

• Sbom-tool generates cargo purl strings with extra "/" char

  accepted
  microsoft/sbom-tool#1050 · Filter by author henrylyons opened on May 13, 2025
  1

• Consider changing RootPathFilter to accept pattern matching

  accepted
  microsoft/sbom-tool#1040 · Filter by author jlperkins opened on May 8, 2025
  2

• Allow Microsoft.ManifestTool -bl option to read files from any directory

  needs investigation
  microsoft/sbom-tool#988 · Filter by author matteo-prosperi opened on Mar 20, 2025