CycloneDX / CycloneDX/cyclonedx-cli
Give option to add added files as dependencies
Open
- Dominant language
- C#
- Stars
- 541
- Forks
- 82
- PR merge metrics
- No merged PRs in 30d
Description
The current `add files` command is very limited. It adds the files to the list of components, but as far as I understood SBOMs, that by itself doesn't represent much. This allows them to be referenced from elsewhere in the SBOM, which in the most typical use case would be to add them as dependencies.
Would it make sense to add the option to include added files as dependencies in the list of `"dependencies"` in the SBOM?
Contributor guide
Assessment
This issue has not been assessed yet.