Timeout when fetching license information

[erri120]

The timeout of 30 seconds is a bit too short for larger projects:

##[debug]Retrieving license information for 500 components...
##[warning]Error encountered while fetching license information from API, resulting SBOM may have incomplete license information: The request was canceled due to the configured HttpClient.Timeout of 30 seconds elapsing.

Would it be possible to increase the timeout or have a configuration option?

sbom-tool/src/Microsoft.Sbom.Api/Executors/LicenseInformationService.cs

Line 23 in 0b4db48

private const int ClientTimeoutSeconds = 30;

sbom-tool/src/Microsoft.Sbom.Api/Executors/LicenseInformationService.cs

Line 41 in 0b4db48

httpClient.Timeout = TimeSpan.FromSeconds(ClientTimeoutSeconds);

[LucaBlackDragon]

I'm facing the same issue in what I'd consider a small project (102 components in total, 27 explicitly referenced).
Maybe using a lower batchSize would help preventing timeouts:

sbom-tool/src/Microsoft.Sbom.Api/Executors/LicenseInformationService.cs

Line 34 in 0b4db48

var batchSize = 500;

But it would also increase the risk of hitting the documented rate limits, so all things considered, I think a configurable timeout would be the best solution.

EDIT: I tried to make a PR about this, but can't build the solution, see #687.

[georg-eckert-zeiss]

Same here. But I don't know the root cause for the timeout. Very large project.