SBOM Schema validation failed

[aygupt1822]

Hello,

I am trying to create sbom for a project onetimesecret-v0.23.2 and using the cyclonedx-ruby tool.

I am building the cyclonedx-ruby directly from the git repo since the latest version 1.2.0 is not present in the RubyGems.

The sbom is created but when I upload it to dependency-track I get the error:-

The uploaded BOM is invalid
Schema validation failed

I guess it is missing some fields from the generated sbom file.

I am also attaching the sbom file for your reference.

Please Help
Thanks

onetimesecret-v0.23.2_sbom.json

[aygupt1822]

Update: I also tried with dependency-track api and I got following error :-

[ERROR] SBOM upload failed:
Dependency-Track rejected SBOM upload.
  URL:      dependency-track.host/api/v1/bom
  Status:   HTTP 400 Bad Request
  Response: {"status":400,"title":"The uploaded BOM is invalid","detail":"Schema validation failed","errors":["$.components: must have only unique items in the array"]}

[jkowalleck]

indeed, this one is multiple times in the components list:

{ 
      "type": "library",
      "name": "ffi",
      "version": "1.17.2"
}