anchore / anchore/syft

Option in parameter or configuration to set value in metadata > authors in SBOM (CycloneDX)

Open
#2,876 3 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Go
Stars
9.6k
Forks
954
Avg merge
23h 27m
Merged PRs (30d)
48

Description

**What would you like to be added**:
Parameter or configuration to add and set metadata > authors > name / email in SBOM in CycloneDX format.
I was actually looking for this ability in the parameter and configuration options but did not find any. Please let me know if I am wrong.

**Why is this needed**:
To automatically include required metadata in CycloneDX format when generating SBOM.

**Additional context**:

Based on CycloneDX schema, it should look like this:

"metadata": {
"authors":{
"name": "Name"
"email": "email@email.com"
}
}

Contributor guide

Open the contributing guide

Research direction

Start by locating Syft's CycloneDX SBOM generation and the parameter or configuration handling for output metadata. Verify the requested author name and email appear under metadata in generated CycloneDX output and match the CycloneDX schema; no file or test location is identified in the issue.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
cli, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
32/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.