How to correctly specify supplier/manufacture in metadata files?

[ChristoWolf]

Hi!

I am generating SBOMs including a metadata file using --import-metadata-path and following the schema.

Everything works well except for supplier and manufacture though.

When specifying

<manufacture name="some name" url="https://www.company.com" />
...
<supplier name="some name" url="https://www.company.com" />

they come out as

<manufacture />
...
<supplier />

I guess it could be related to me not specifying contacts in them, but that's an array, so optional from my understanding, right?

Any help would be greatly appreciated :)

[ChristoWolf]

Would appreciate any help!

[mtsfoni]

Try them as children nodes not as attributes.

[ChristoWolf]

Works, thanks for clarifying!