Hi,
Thank you for contacting us. We were able to reproduce the license URL validation warnings you reported in the SBOM output. However, when generating the SBOM report using an alternative tool, these warnings did not occur.
During our investigation, we identified that the issue is caused by an automatically generated <licenseUrl> tag being inserted during the NuGet packing process. This auto‑added tag is what triggers the validation error in the SBOM report.
We have already reached out to the NuGet support team regarding this behavior and are working with them to identify a resolution. We will provide you with an update as soon as we receive further information from their team.
If you need any additional information, please let us know.
Regards,
Valan