search

sbt / sbt-sbom

sbt bom.xml exporter
MIT License
20 stars 7 forks source link

Some concerns about sbt-bom plugin #24

Open MonjurMorshed opened 3 years ago

MonjurMorshed commented 3 years ago

Hi, Recently I am trying to use your sbt-bom plugin which is officially recommended by CycloneDx and build the bom.xml file. I compared the generated bom file with the Maven plugin generated bom file and found some issues like

  1. Current xml schema version is 1.0 but I am looking for version 1.2 or upper
  2. Metadata is missing.
  3. Only makeBom available but looking mostly makeAggregateBom command.

Though it is still under developing but could you please share me when we get it as a complete version.

okgolove commented 2 years ago

makeAggregateBom would be a great feature!