CycloneDX / CycloneDX/cyclonedx-cli

Provide an option to convert a Mend UA JSON to a CycloneDX JSON

Open
#321 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
541
Forks
82
PR merge metrics
No merged PRs in 30d

Description

Mend reports are a fairly standard JSON and actually have the necessary information in to create a valid CycloneDX JSON with valid Purls

[demo_mend_ua.json.zip](https://github.com/CycloneDX/cyclonedx-cli/files/11703622/demo_mend_ua.json.zip)

This is a sample one and you can see by combining the libraries/artifactid (package name) and libraries/version (package version) and using libraries/type (Technology) you can create valid purls.

In this example one the libraries type is javascript/Node.js and so you could take the first entry of

json-schema
0.4.0
javascript/Node.js

and create a Purl of

pkg:npm/json-schema@0.4.0

Unfortunately, this is the only example Mend UA report I have and so I cannot give any further information as to what the libraries/type fields could be set to.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.