Skip to content

Latest commit

 

History

History

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 

README.md

Maven SBOM Generator

Generates a CycloneDX SBOM in JSON format from a project's pom.xml using cyclonedx-maven-plugin.

Build

docker build -t sbom-maven .

Run

Mount a directory containing a pom.xml:

docker run --rm \
  -v "$(pwd):/semgrep/workspace" \
  -v "./outputs:/semgrep/outputs" \
  sbom-maven

The generated bom.json will be written to the outputs directory.