Skip to content

Implement package/module based CBOM generation #2

@n1ckl0sk0rtge

Description

@n1ckl0sk0rtge

Similar to how the package identification is implemented in CBOMkit this should be support here too. See https://github.com/IBM/cbomkit/tree/main/src/main/java/com/ibm/usecases/scanning/services/pkg

Todo's

  • Implement package idetification
  • Create CBOMs for each package
  • Apply naming convention to CBOMs

Naming convention

Java

cbom-<artifactId>-<version>.json

Python:

cbom-<projectName>-<version>.json

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions