[SPDX][TV] SBOM value format is incorrect for LicenseID

[surendrapathak]

Summary

SPDX value format is missing or incorrect for LicenseID on line number 13888 in the linked SBOM.

LicenseID: LicenseRef-MIT/X11

Background

1. Download syft version 0.73.0
2. Generate sbom with syft packages {image}:{version} -o {syft_format} --file {out_file} for ubuntu tag kinetic
3. Observe the following error:

SPDX value format is missing or incorrect for LicenseID

Expected behavior

LicenseID should be valid SPDX string.
Rule: "LicenseRef-"[idstring] where [idstring] is a unique string containing letters, numbers, . and/or -.
Error: LicenseID contains '/'

Screenshots

If applicable, add screenshots to help explain the problem.

Repository

Which repository causes this error?

• ubuntu:kinetic

Additional Context

Optional - add any other context about the problem here.

Acceptance Criteria

The "done" criteria when this feature or problem is resolved. Such as:

1. Unit Tests added and running in CI
2. Functional Tests updated to cover feature, if applicable
3. Demonstrate the set of capabilities to the product team

References

Limited to SPDX.
Finder: sbomqs
SBOM: sbomlc-ubuntu-kinetic

[kzantow]

Good catch @surendrapathak! Will be fixed with PR #1657