Unable to submit SBOM to Dependecy Track

[piyush94]

Unable to submit the SBOM to the Dependency-Track server using POST method HTTPError: Response code 400 (Bad Request)
    at Request.<anonymous> (file:///usr/local/lib/node_modules/@cyclonedx/cdxgen/node_modules/got/dist/source/as-promise/index.js:92:42)
    at Object.onceWrapper (node:events:633:26)
    at Request.emit (node:events:530:35)
    at Request.emit (node:domain:489:12)
    at Request._onResponseBase (file:///usr/local/lib/node_modules/@cyclonedx/cdxgen/node_modules/got/dist/source/core/index.js:609:22)
    at process.processTicksAndRejections (node:internal/process/task_queues:95:5)
    at async Request._onResponse (file:///usr/local/lib/node_modules/@cyclonedx/cdxgen/node_modules/got/dist/source/core/index.js:649:13)

Cdxgen version: 11.1.8
Node version: 20.18.1

[prabhu]

Could you investigate on the dependency track side to see if there are any validation errors or some such?

[piyush94]

@prabhu I am seeing this error but not sure if it's related to this.

ERROR [OsvDownloadTask] Exception while executing Http client request
java.lang.NullPointerException: Cannot invoke "us.springett.cvss.Cvss.calculateScore()" because "cvss" is null
	at org.dependencytrack.tasks.OsvDownloadTask.calculateOSVSeverity(OsvDownloadTask.java:271)
	at org.dependencytrack.tasks.OsvDownloadTask.mapAdvisoryToVulnerability(OsvDownloadTask.java:259)
	at org.dependencytrack.tasks.OsvDownloadTask.updateDatasource(OsvDownloadTask.java:164)
	at org.dependencytrack.tasks.OsvDownloadTask.unzipFolder(OsvDownloadTask.java:151)
	at org.dependencytrack.tasks.OsvDownloadTask.inform(OsvDownloadTask.java:121)
	at alpine.event.framework.BaseEventService.lambda$publish$0(BaseEventService.java:110)
	at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
	at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
	at java.base/java.lang.Thread.run(Unknown Source)

[prabhu]

May not be related to this error. Can you ask in any Dependency Track related channels for troubleshooting help?

Note to self: need to add dependency track knowledge to cdxgenGPT.