Dependencies Missing in Report when Using cyclonedx-gradle-plugin in Multi-Module Android Project

[aeroxr1]

I’m having issues using the cyclonedx-gradle-plugin in a multi-module project.

I am using the init.gradle script taken from the plugin’s GitHub page.

init.gradle

In addition, I’ve included skipConfigs as suggested in this issue:

Issue

When I run the following command:

.\gradlew --init-script .\init.gradle cyclonedxBom --info
the reports are generated, but none of the dependencies are listed. For instance, Jackson doesn’t appear.

Why is this happening?

I’ve also created a sample project that replicates the issue. On the main branch, you’ll find the source with version catalogs, while the without_version_catalog branch contains the version with the versioning as-is. You can find the project here:

testAndroidSbom

[andreaschir]

same problem here

[riccardodini]

I have the same problem. My project has multiple module and multiple flavours also.