search

advanced-security / gh-sbom

Generate SBOMs with gh CLI
MIT License
161 stars 13 forks source link

Timeout on generation #10

Open alper opened 1 year ago

alper commented 1 year ago

I'm getting this error:

2023/04/06 12:59:14 Message: timedout, Locations: [{Line:1 Column:155}]

steiza commented 1 year ago

As you discovered, this can take awhile to generate a SBOM for a large repository, or fail altogether for very large repositories.

The Dependency Graph team was kind enough to implement a server-side SBOM generator for SPDX, which is much, much faster. The gh-sbom v0.0.9 release makes use of this feature - give it a try and let us know if that works for you?

You'll need to update gh-sbom with:

$ gh ext remove advanced-security/gh-sbom
$ gh ext install advanced-security/gh-sbom
reedloden commented 1 year ago

Are there plans to do the same for CycloneDX (or at least some other type of fix)?