Add new SBOM service - Githubissues

aboutcode-org / purldb

Tools to create and expose a database of purls (Package URLs). This project is sponsored by NLnet project https://nlnet.nl/project/vulnerabilitydatabase/ and nexB for https://www.aboutcode.org/ Chat is at https://gitter.im/aboutcode-org/discuss

https://purldb.readthedocs.io/

35 stars 23 forks source link

Add new SBOM service #461

Open pombredanne opened 5 months ago

pombredanne commented 5 months ago

We already have all the data and all the code to do this.

We should expose this as a new API endpoint. It should accept a few minimum arguments:

Format (SPDX, CycloneDX or "kissbom" ;) and their version)
Inclusion of files details or "evidence"