SBOM according to BSI TR-03183 #941
LilBulb1337
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
This SBOM requires me to also add the filename, which is currently missing on the CycloneDX 1.6 schema and the hashes for my own binaries.
I have cloned the project and added this to the tool.
I also added the CPE for your own Projects.
The repo can be found here: https://github.com/LilBulb1337/cyclonedx-dotnet
There are some places marked with TODO that would require some coordination on how to configure this.
There is still a lot that can be done with respect to the Project handling and maybe some of the Nuget related code could be adapted also with using MSBuild also the code can be sped up quite a lot once you brush over it.
Is this something that could make it back into the repo? I am unsure in general if i want to write my own tooling that adds this kind of information or if this is so integral that i would like it to be in CycloneDX. If it was added later i would have to work on my tooling later on.
Beta Was this translation helpful? Give feedback.
All reactions