SamuraiAku / PkgToSoftwareBOM.jl

Produces a Software Bill of Materials (SBOM) describing your Julia Pkg environment. SBOM is in the SPDX format
MIT License
17 stars 2 forks source link

Add JLL artifact source code to the SBOM #36

Closed SamuraiAku closed 2 months ago

SamuraiAku commented 2 months ago

Resolves #33 . When the keyword find_artifactsource is invoked, PkgToSoftwareBOM will scan the README of JLLs generated using BinaryBuilder.jl and extract the branch of Yggdrasil, the Julia community build tree, used to generate the JLL's artifact. A new package in the SBOM is created with this information and a new relationship is created showing that the artifact was GENERATED_FROM this branch.