Skip to main content

CycloneDX software bill-of-material (SBOM) generation utility

Project description

Build Status License Website PyPI Group Discussion Twitter

CycloneDX Python Module

The CycloneDX module for Python creates a valid CycloneDX bill-of-material document containing an aggregate of all project dependencies. CycloneDX is a lightweight BoM specification that is easily created, human readable, and simple to parse. The resulting bom.xml can be used with tools such as OWASP Dependency-Track for the continuous analysis of components.

Usage

Freezing

A bill-of-material such as CycloneDX expects exact version numbers. Therefore requirements.txt must be frozen. This can be accomplished via:

$ pip freeze > requirements.txt

Installing

$ pip install cyclonedx-bom

Options

By default, requirements.txt will be read from the current working directory and the resulting bom.xml will also be created in the current working directory. These options can be overwritten as follows:

$ cyclonedx-py
  Usage:  cyclonedx-py [OPTIONS]
  Options:
    -i <path> - the alternate filename to a frozen requirements.txt
    -o <path> - the bom file to create

License

Permission to modify and redistribute is granted under the terms of the Apache 2.0 license.

Project details


Release history Release notifications | RSS feed

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

cyclonedx-bom-0.3.2.tar.gz (5.6 kB view details)

Uploaded Source

Built Distribution

cyclonedx_bom-0.3.2-py2.py3-none-any.whl (21.0 kB view details)

Uploaded Python 2 Python 3

File details

Details for the file cyclonedx-bom-0.3.2.tar.gz.

File metadata

  • Download URL: cyclonedx-bom-0.3.2.tar.gz
  • Upload date:
  • Size: 5.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.12.1 pkginfo/1.4.2 requests/2.22.0 setuptools/18.5 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/2.7.10

File hashes

Hashes for cyclonedx-bom-0.3.2.tar.gz
Algorithm Hash digest
SHA256 7255db877aa1a6e1e1a67382fbdd1df998791eb95aa394494f45fcb08676ba01
MD5 bd1873772fb8bea29146308fd51d65d4
BLAKE2b-256 6004969a6d225aafbe5629c5743926b61eeec7b744f273c604e9d20a4017bd8a

See more details on using hashes here.

Provenance

File details

Details for the file cyclonedx_bom-0.3.2-py2.py3-none-any.whl.

File metadata

  • Download URL: cyclonedx_bom-0.3.2-py2.py3-none-any.whl
  • Upload date:
  • Size: 21.0 kB
  • Tags: Python 2, Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/1.12.1 pkginfo/1.4.2 requests/2.22.0 setuptools/18.5 requests-toolbelt/0.8.0 tqdm/4.28.1 CPython/2.7.10

File hashes

Hashes for cyclonedx_bom-0.3.2-py2.py3-none-any.whl
Algorithm Hash digest
SHA256 79f230aec9912ed130d762a8f58df6aa735754e3e3f28bc3cdc7d6771a56a285
MD5 fb9c568ddfc9987cc6986d244d402b21
BLAKE2b-256 ebfedd397b1a6bf77dc3c9ddd416c843f7243d91218ac4d41a48d185ceb9f412

See more details on using hashes here.

Provenance

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page