cyclonedx-dotnet icon indicating copy to clipboard operation
cyclonedx-dotnet copied to clipboard
verified publisher icon CycloneDX

Add support for paket (paket.lock files)

Open JanKrivanek opened this issue 4 years ago • 2 comments

Paket is alternative dependency manager for .NET. There is currently no support for generating SBOM files for Paket managed dependencies - it would be great to have it.

JanKrivanek avatar May 10 '21 08:05 JanKrivanek

Hi @jakrivan I haven't used Paket myself.

Are all dependencies listed in the paket.lock file?

I'm not sure if it makes sense to add support to this tool or to take a copy of this tool and refactor to support Paket.

coderpatros avatar Jun 27 '21 05:06 coderpatros

Yeah - that's a good question. In our case we went different route (local resolve and then sbom generation). So this suggestion can be closed now or just kept around untill anybody needs it and then the discussion can happen.

JanKrivanek avatar Jun 28 '21 08:06 JanKrivanek

This issue is stale because it has been open for 3 months with no activity.

github-actions[bot] avatar Jan 14 '24 02:01 github-actions[bot]