SboM generation for Vmware

[whiteninja76]

I know this is outside dependency track, but there might be a of chance someone else here has had a simliar problem,
I need to get as close to a sbom as possible for 2 iso images from the broadcom/vmware free tier,
VMware-VMvisor-Installer
VMware-workstation-full

tried various tools like Trivy etc but none of them produce anything of any worth..Am i missing something is there trick to this.
I really want to get them into DependencyTrack as its proven its self extremely useful and a key part of our system.

[nscuro]

You could try https://github.com/cdxgen/cdxgen.

You'll likely need to extract the ISOs before running any tool against them. And even then, the ISOs probably contain mostly binaries, which most tools have a hard time scanning and fingerprinting.

[whiteninja76]

Yer tried that and got zip, Was wondering if anyone had found another way to get something usefull out of the broadcom/vmware .. Given all the intrest in Sbom's lately thought it was a given that they would generate the info and have it accessible somewhere just cant find it..