-
SBOMs are one artifact that a build system may output, in addition to other binaries, tarballs, etc
We should document this in the doc https://github.com/slsa-framework/slsa-github-generator/tree/mai…
-
## Summary
Update the project's plugin architecture to use actual compile-time Go plugins
## Background
The project's current Plugin setup does not actually allow other tools to "plug-in". `d…
-
@prathapbproximabiz
**Tool Version** Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool
**Test Repo** https://github.com/zxing/zxing
**OS**…
-
**Tool Version** Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool
**Test Repo** https://github.com/lewisojile/ruby-gem-sample
**OS** Windo…
-
@prathapbproximabiz
**Tool Version** Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool
**Test Repo** https://github.com/zxing/zxing
**OS*…
-
**Is your feature request related to a problem? Please describe.**
This is a feature, not related to a problem.
**Describe the solution you'd like**
GoReleaser has the support of signing binari…
-
The license information and download location of the conversion from cdx.json to spdx.json misses the value.
`from lib4sbom.parser import SBOMParser
from lib4sbom.generator import SBOMGenerator
…
-
### Is there an existing issue for this?
- [X] I have searched the existing issues
### This issue exists in the latest npm version
- [X] I am using the latest npm
### Current Behavior
T…
-
**Tool Version** Cloned code from main branch of https://github.com/spdx/spdx-sbom-generator on 11-06-2021 and built the tool
**Test Repo** https://github.com/lewisojile/ruby-gem-sample
**OS** Windo…
-
Currently the generated SBOM is always saved to a file, denoted by `-o` flag. This makes it complicated to use the BOM in scripts for further processing.