CycloneDX / CycloneDX/cyclonedx-dotnet

SHA512 hash format of the components

Open
#950 0 comments 0 reactions 0 assignees View on GitHub
triage
Dominant language
C#
Stars
294
Forks
123
PR merge metrics
No merged PRs in 30d

Description

Analyzing the following tool [https://github.com/CycloneDX/cyclonedx-dotnet], I notice that it uses the old hash format generated by NuGet. I wonder if it would be better to use the new hash format of NuGet (which is also present in the lockfile "packages.lock.json") or if it would have a way to at least represent the used hash format (there doesn't seem to be an easy way at first glance to represent this). Information about the two hash formats that exist: https://github.com/NuGet/Home/wiki/Nupkg-Metadata-File

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.