cyclonedx-dotnet
cyclonedx-dotnet copied to clipboard
CycloneDX
Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects
The root component should have the following populated: - modified - tags - copyright - licence if not already done - Hashes - group - publisher - authors - supplier...
Enables installing and running `CycloneDX` on runtimes/SDKs newer than those that it targets when published. (For instance, allows v4.0.0 to run with only .NET SDK 9.0 installed, and no 8.0,...
Couple of days ago I started getting this exception when generating SBOM from one of our projects. Dependency (Grpc.Tools) with version range ([2.55.1, )) referenced by (Name:Grpc.AspNetCore Version:2.55.0) did not...
* add support for X# project files with the .xsproj extension * add support for extracting version from AssemblyInfo.prg file for X# project files Signed-off-by: Volkmar Rigo
Resolve an issue where versions with uppercase characters (e.g., 1.0.0-Beta, 1.0.0.BETA.1) caused CycloneDX to throw errors. The problem occurred because the NuGet cache converted version strings to lowercase for path...
System.IO.IOException: An attempt was made to move the position before the beginning of the stream.
Hi Team, Command used: dotnet cyclonedx --json --out OutputPath Solutionpath --url AlternativeNuGetSourceprovided --disable-github-licenses --exclude-dev --exclude-test-projects --dotnet-command-timeout 900000 It fails with the below error - Analyzing: *******************.csproj Attempting to restore packages...
We have a .sln that contains a mixture of .csproj and .vcxproj. The initial prcocessing in GetSolutionProjectReferencesAsync correctly removed invalid projects calling Utils.IsSupportedProjectType. However the code just below this then...
A fix for #896. When processing recursively through projects to get references, apply the supported project test and skip any projects that do not satisfy the test. It uses the...
## Context I have come across an issue while using this tool to generate an SBOM for one of our larger solutions. When the following occurs: 1. Package dependency is...
CycloneDX-DotNet currently supports project files with the extensions .csproj, .fsproj and .vbproj. It would be nice to add support for the .xsproj extension. This extension is used by project files...