Similar to how the package identification is implemented in CBOMkit this should be support here too. See https://github.com/IBM/cbomkit/tree/main/src/main/java/com/ibm/usecases/scanning/services/pkg
Todo's
Naming convention
Java
cbom-<artifactId>-<version>.json
Python:
cbom-<projectName>-<version>.json
Similar to how the package identification is implemented in CBOMkit this should be support here too. See https://github.com/IBM/cbomkit/tree/main/src/main/java/com/ibm/usecases/scanning/services/pkg
Todo's
Naming convention
Java
cbom-<artifactId>-<version>.jsonPython:
cbom-<projectName>-<version>.json