CycloneDX / CycloneDX/cyclonedx-cli
Provide an option to convert a Mend UA JSON to a CycloneDX JSON
- Dominant language
- C#
- Stars
- 541
- Forks
- 82
- PR merge metrics
- No merged PRs in 30d
Description
Mend reports are a fairly standard JSON and actually have the necessary information in to create a valid CycloneDX JSON with valid Purls
[demo_mend_ua.json.zip](https://github.com/CycloneDX/cyclonedx-cli/files/11703622/demo_mend_ua.json.zip)
This is a sample one and you can see by combining the libraries/artifactid (package name) and libraries/version (package version) and using libraries/type (Technology) you can create valid purls.
In this example one the libraries type is javascript/Node.js and so you could take the first entry of
json-schema
0.4.0
javascript/Node.js
and create a Purl of
pkg:npm/json-schema@0.4.0
Unfortunately, this is the only example Mend UA report I have and so I cannot give any further information as to what the libraries/type fields could be set to.
Contributor guide
Assessment
This issue has not been assessed yet.