Add Conan repository support for C++ projects
Current Behavior
Currently no apparent repository support for C++.
Proposed Behavior
Support for adding a Conan repository that links C++ SBOMs generated via Conan to live vulnerability and dependency staleness information.
Checklist
- [X] I have read and understand the contributing guidelines
- [X] I have checked the existing issues for whether this enhancement was already requested
I generated an sbom with https://github.com/conan-io/conan-extensions/blob/main/extensions/commands/sbom/cmd_cyclonedx.py and some example packages; it was fully compatible with the latest dependency track and showed me various vulnerabilities.
What exactly is not working for you? Can you provide an example SBOM which is not working as expected and point out what you would expect?
Some notes:
- The canonical repository for Conan appears to be ConanCenter: https://conan.io/center
- Upon first look I haven't seen a public API of ConanCenter
@shoeffner This issue is primarily for the latest version check. While vulnerability analysis for Conan is supported via OSS Index, DT currently has no way to fetch package metadata, such as the latest available version.