CycloneDX / CycloneDX/cyclonedx-cli
Embedding Scancode toolkit into Cyclone DX
Open
- Dominant language
- C#
- Stars
- 541
- Forks
- 82
- PR merge metrics
- No merged PRs in 30d
Description
Cyclone Dx is dependent on so many other tools , like for C/C++ we need conan package manager .
I propose we use ScanCode https://github.com/nexB/scancode-toolkit to look into binaries and blobs as well in addition to just generating from manifest or package information files.
In this way we will be independent of any package manager dependency.
The scan tool kit generates a json files which can be converted to Cyclone dx.
Contributor guide
Assessment
This issue has not been assessed yet.