Issue: CycloneDX component scope is not stored or exposed in findings
Issue: CycloneDX component scope is not stored or exposed in findings: a task in LegoFlow-SWE (Harbor dataset). Observed behavior When a CycloneDX SBOM containing component scope data (e.g., required , optional , excluded as defined in CycloneDX 1.6) is uploaded, the scope information is silently…
The task
**Observed behavior** When a CycloneDX SBOM containing component scope data (e.g., `required`, `optional`, `excluded` as defined in CycloneDX 1.6) is uploaded, the scope information is silently ignored. It is neither persisted on the component record nor available in any downstream representation of findings. As a…
Part of Lego-X/LegoFlow-SWE.