Update Entry: CycloneDX-buildroot

[jkowalleck]

Please update the following entry:

Tool: CycloneDX-buildroot
Context URL: https://sbom-catalog.openssf.org/catalog/#/List/Normalize/CycloneDX-buildroot

Suggested changes:

sbom-everywhere/SBOM-Catalog/public/data.yaml

Lines 1038 to 1046 in 78a0d9b

	- Abilities:
	- Generate
	Languages:
	- Maven
	- Pypi
	License: Apache-2.0
	Link: https://github.com/CycloneDX/cyclonedx-buildroot
	Name: CycloneDX-buildroot
	Publisher: CycloneDX

No idea what language Pypi is, or Maven, but I know none of those were involved this tool.
Actually, it is written in python.

[Mariuxdeangelo]

Thank you for you feedback, that is an issue we still were not able to address in an easy to understand way. This field is not intended to store the language the tool is written in but the languages the tool can process when creating an SBOM. Why the Programming languages are Python and Java, the Build tooling for this languages can be of different kind. For example java often comes with Gradle or Maven. Mapping Java to an SBOM Tool would not be correct if the tool only processes one of them.

I understand that this complexity is not easy to understand, but we currently have no better way to address this.

[jkowalleck]

This field is not intended to store the language the tool is written in but the languages the tool can process when creating an SBOM.

the tools does not process any language, it uses a proprietary input format.

[Mariuxdeangelo]

Ah okay, thank you for pointing this out. Then it will remove the assigned languages and clarify the description.

[jkowalleck]

to be clear, the proprietary input file is actually buildroot's own manifest output file.

[Mariuxdeangelo]

This was fixed in #116 and i forgot to close it.

[Mariuxdeangelo]

Ah sorry i messed up, this still waits for review my bad.