-
Hi Cyclonedx Team,
Is there any way to scan the Tycho dependencies using cyclonedx-maven-plugin?.
I found that [syft ](https://github.com/anchore/syft) tool can generate cyclonedx format but i…
-
Can you please add for each release a sbom file?
This would help to keep track of the current security state of the software.
-
Zie apart bord: https://github.com/orgs/ospo-nl/projects/2
-
**What would you like to be added**:
(Hi, loving the tool, thanks for all your efforts)
We have a pnpm monorepo using the workspaces functionality.
I am able to prepare an sbom at the top lev…
-
### Description
I'm receiving the following error instead of a successful response when executing the command (on a private repository): `gh sbom -l | jq`
```
2023/03/16 08:42:24 non-200 OK sta…
-
`pip_parse` allows us to import third party dependencies, but the imports lack enough information for us to generate an SBOM. It would be useful if targets imported from third party python deps were a…
-
### Feature description
Generate a software-bill-of-materials (SBOM) supply-chain security artifact in CI.
### Value and/or benefit
Improve supply-chain security by generating a SBOM artifact in CI…
-
### Current Behavior
Generate an SBOM of a docker image using syft:
`syft packages mcr.microsoft.com/oss/kubernetes-csi/csi-resizer:v.1.1.0 -o cyclonedx-json > test.json`
This will result in an SBO…
-
hi,
is this project maintained?
is it possible to make this work with Yocto generated SBOMs? i have a demo using the action in https://github.com/mischief/spdx-sbom-test, with an SBOM generated …
-
### Description
In a multimodule Maven project, some submodules are configured with the projectType: application setting in the CycloneDX Maven plugin. However, when generating the aggregated SBOM …