CycloneDX / CycloneDX/cyclonedx-cli

Embedding Scancode toolkit into Cyclone DX

Open
#249 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
541
Forks
82
PR merge metrics
No merged PRs in 30d

Description

Cyclone Dx is dependent on so many other tools , like for C/C++ we need conan package manager .
I propose we use ScanCode https://github.com/nexB/scancode-toolkit to look into binaries and blobs as well in addition to just generating from manifest or package information files.
In this way we will be independent of any package manager dependency.
The scan tool kit generates a json files which can be converted to Cyclone dx.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.