CycloneDX / CycloneDX/cyclonedx-webpack-plugin

feat: have "formulation" as part of the BOM - MBOM

Open
#1,019 1 comment 0 reactions 0 assignees View on GitHub
enhancement help wanted idea schema 1.5
Dominant language
TypeScript
Stars
30
Forks
11
Avg merge
16m
Merged PRs (30d)
1

Description

## Is your feature request related to a problem? Please describe.

CycloneDX 1.5 supports formulation: https://cyclonedx.org/guides/sbom/formulation
This could be used to document how webpack was configured and how it compiled/packed the results.

## Describe the solution you'd like

* if target is spec 1.5, then the result should contain information how webpack built the result.
* the details are to be discussed here:
* add Manufacturing Bill of Materials (MBOM) to the capabilities/keywords
* ... to be continued & discussed

## Describe alternatives you've considered

--

## Additional context

need to POC/investigate what information can be gathered from webpack, and if the information qualifies for "CDX formulation"

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.