Patrick Dwyer

Official Docker image

6

Hi team! Any current plans to create a docker image for this? Just don't want to go to the trouble of creating one if you are already working on it.

https://github.com/CycloneDX/cyclonedx-web-tool/runs/7798800441?check_suite_focus=true > /usr/bin/docker buildx build --build-arg VERSION=0.5.2 --iidfile /tmp/docker-build-push-7FIqNW/iidfile --platform linux/amd64,linux/arm64 --secret id=GIT_AUTH_TOKEN,src=/tmp/docker-build-push-7FIqNW/tmp-2033-6VgNzt1hCUW3 --tag cyclonedx/cyclonedx-web-tool:0.5.2 --tag cyclonedx/cyclonedx-web-tool:latest --metadata-file /tmp/docker-build-push-7FIqNW/metadata-file --push https://github.com/CycloneDX/cyclonedx-web-tool.git#b3d0c028c7a82e69ad63d1dc459b5af63c12fe51 error: multiple platforms feature is currently not supported for...

My current thinking is a visual hierarchical diff. A bit like diff tools that support a diff between two directories. A really basic mock up using meld  But with...

Add a basic interface to be able to search, browse, and download BOMs from any CDX API compliant repo server.

Add required support for HEAD requests

2

This allows polling for latest version of a BOM without having to retrieve it entirely.

Add support for JSON output

3

In preparation of v1.2 of the spec we need to support JSON output.

Flat merging can result in duplicate BOM refs

1

Not sure how to handle this. For hierarchical merging the top level component information can be used to "namespace" BOM refs. Maybe requires supporting passing in namespace values for each...

https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/