CycloneDX / CycloneDX/cyclonedx-python

Feature Request: Include Python version in SBOM

オープン
#597 コメント 7 件 リアクション 5 件 担当者 0 名 GitHub で見る
enhancement help wanted
主要言語
Python
スター
390
フォーク
98
平均マージ
2日 23時間
マージ済み PR(30日)
2

説明

As discussed in https://github.com/CycloneDX/cyclonedx-python/discussions/393#discussioncomment-7270903 the specific version of Python that a piece of software is run with is an important part of its dependencies.

Therefore, although the Python version isn't usually bundled with a piece of software, it can be useful to know what version was used when the SBOM was generated - ideally, because that is the same version it is deployed with or was used to build the wheel.

For internal tools, it provides visibility into which Python versions are being used.

Limitations:
Especially if a tool isn't package but simply deployed, it can be used with any Python version that supports all features it uses, and the SBOM cannot accurately reflect that. This could potentially be misleading.

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。