CycloneDX / CycloneDX/cyclonedx-cli

Give option to add added files as dependencies

Open
#422 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
541
Forks
82
PR merge metrics
No merged PRs in 30d

Description

The current `add files` command is very limited. It adds the files to the list of components, but as far as I understood SBOMs, that by itself doesn't represent much. This allows them to be referenced from elsewhere in the SBOM, which in the most typical use case would be to add them as dependencies.

Would it make sense to add the option to include added files as dependencies in the list of `"dependencies"` in the SBOM?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.