Inedo / pgscan

Dependency scanner for ProGet.
MIT License
11 stars 5 forks source link

Add support to scan Conda requirements #41

Closed rhessinger closed 1 year ago

rhessinger commented 1 year ago

This will require the user to create a requirements.txt file using one of the two following commands from within their Conda environment:

The only advantage of using --explicit is the SBOM will include the dependencies type (.conda or .tar.bz2).

Once the requirements.txt has been created, you can then run the inspect command to scan the dependencies:

pgscan identify --input="/home/user/my-conda-packgage/Requirements2.txt" --proget-url=https://myprogetserver.com --version=1.0.0 --project-name=MyCondaPackage --type=conda --api-key={my-api-key}