Create sbom for specific project in solution

[m-bachner]

We have a use case where we need to generate an sbom file for one specific project in a bigger solution. As I understand it the sbom-tool needs the complete source directory of the project and all dependent projects. In our case we have other unrelated projects in the same solution.

So is it possible to only keep dependencies and transitive dependencies of one specific csproj in a solution and ignore unrelated projects?

[sfoslund]

Hi @m-bachner I would suggestion pointing the buildDropPath and buildComponent path parameters to project specific directories, instead of solution specific directories. The exact parameters you provide will depend on the details of your solution/project set up, but making these parameters more specific will limit the scope of the produced SBOM.

[m-bachner]

Okay, thank you for your reply.