Skip to main content

CycloneDX software bill-of-material (SBoM) generation utility

Project description

The CycloneDX module for Python creates a valid CycloneDX bill-of-material document containing an aggregate of all project dependencies. CycloneDX is a lightweight BoM specification that is easily created, human readable, and simple to parse. The resulting bom.xml can be used with tools such as OWASP Dependency-Track for the continuous analysis of components.

Usage

Freezing

A bill-of-material such as CycloneDX expects exact version numbers. Therefore requirements.txt must be frozen. This can be accomplished via:

$ pip freeze > requirements.txt

Installing

$ pip install cyclonedx-bom

Options

By default, requirements.txt will be read from the current working directory and the resulting bom.xml will also be created in the current working directory. These options can be overwritten as follows:

$ cyclonedx-py
  Usage:  cyclonedx-py [OPTIONS]
  Options:
    -i <path> - the alternate filename to a frozen requirements.txt
    -o <path> - the bom file to create

License

Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx-bom-0.3.0.tar.gz (5.0 kB view details)

Uploaded Source

Built Distribution

cyclonedx_bom-0.3.0-py2.py3-none-any.whl (20.3 kB view details)

Uploaded Python 2 Python 3

File details

Details for the file cyclonedx-bom-0.3.0.tar.gz.

File metadata

  • Download URL: cyclonedx-bom-0.3.0.tar.gz
  • Upload date:
  • Size: 5.0 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.12.1 pkginfo/1.4.2 requests/2.20.1 setuptools/18.5 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/2.7.10

File hashes

Hashes for cyclonedx-bom-0.3.0.tar.gz
Algorithm Hash digest
SHA256 1ce9c1594f9aeca121882a5e1b461e1654224298fbd2c1a1c176bd26735a2312
MD5 22db9bfb35f04261a03b517278b11c92
BLAKE2b-256 c28b45d2068bb6e79ba04fba4e313d865bdacab1cbba2c7d620f30ed56190515

See more details on using hashes here.

Provenance

File details

Details for the file cyclonedx_bom-0.3.0-py2.py3-none-any.whl.

File metadata

  • Download URL: cyclonedx_bom-0.3.0-py2.py3-none-any.whl
  • Upload date:
  • Size: 20.3 kB
  • Tags: Python 2, Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.12.1 pkginfo/1.4.2 requests/2.20.1 setuptools/18.5 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/2.7.10

File hashes

Hashes for cyclonedx_bom-0.3.0-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 995ea19448f47092f4576cb8129fd462698c5936a169615d5629c5f93646a96d
MD5 5ddcd938b7e9c862de59cfff20483f26
BLAKE2b-256 455d3b59aa416e220c0d65eada1401aadde4c3c2cce12239b5b4d4f7b851a9c6

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page