cdxgen
cdxgen copied to clipboard
[Python CBOM] All python cryptography usages not detected
Command Run get Python CBOM:
node /opt/cdxgen/bin/cdxgen.js -t python --include-crypto -o bom.json .
Output:
Expected Output to contain following references: https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/secure_tempfile.py#L92 https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/admin/securedrop_admin/init.py#L808 https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/models.py#L453 https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/two_factor.py#L33
Environment:
OS: 22.04.1-Ubuntu
node: v20.9.0
npm: 10.1.0
cdxgen: form master 246e995
PyCryptodome Cryptography, Fernet https://cryptography.io/en/latest/ PyNaCl PyOpenSSL Keyczar M2Crypto asn1crypto
any synergy with project https://github.com/advanced-security/cbom-action ?