aboutcode-org / aboutcode-org/scancode-toolkit
Ingest SBOM
Open
package-formats
- Dominant language
- Python
- Stars
- 2.6k
- Forks
- 791
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 5
Description
It would be great to ingest SBOM such as SPDX or CycloneDX.
I think the best design is to treat these as "package_data" and process them in the same flow as packages in general.
Contributor guide
Assessment
This issue has not been assessed yet.