Add CycloneDx output option

AUTHORS.rst

@@ -6,6 +6,7 @@ The following organizations or individuals have contributed to ScanCode:
 - Agni Bhattacharyya @PyAgni
 - Akanksha Garg @akugarg
 - Alex Blekhman @a-tinsmith
+- Alexander Gschrei @agschrei
 - Armijn Hemmel @armijnhemel
 - Arnaud Jeansen @ajeans
 - Arnav Mandal @arnav-mandal1234

CHANGELOG.rst

@@ -37,6 +37,10 @@ Copyright detection:
  - The data structure in the JSON is now using consistently named attributes as
    opposed to a plain value.
 
+Outputs:
+~~~~~~~~
+ - Add new outputs for the CycloneDx format.
+   The CLI now exposes options to produce CycloneDx BOMs in either JSON or XML format
 
 Package detection:
 ~~~~~~~~~~~~~~~~~~

docs/source/cli-reference/output-format.rst

@@ -576,4 +576,28 @@ Comparing Different ``json`` Output Formats
 
 ----
 
+``--cyclonedx FILE``
+--------------------
+    Scancode also supports the `CycloneDx <https://cyclonedx.org/specification/overview/>`_ output format
+
+    Please note that this output format is only useful when scanning with the ``--package`` option
+
+    This output format is particularly useful if you want to process ScanCode results in downstream tools
+    that can't process ScanCode's native JSON output, but do support CycloneDx BOMs.
+
+    To run an example scan on the test resources try:
+    ``./scancode --package --cyclonedx=bom.xml tests/formattedcode/data/cyclonedx/simple``
+
+____
+
+``--cyclonedx-json FILE``
+-------------------------
+
+    This option allows outputting CycloneDx BOMs in JSON instead of XML format
+
+    To run an example scan on the test resources try:
+    ``./scancode --package --cyclonedx-json=bom.json tests/formattedcode/data/cyclonedx/simple``
+
+____
+
 .. include::  /rst_snippets/custom_output_format.rst

docs/source/rst_snippets/output_format_options.rst

@@ -31,4 +31,8 @@ All Scan Output Options
 --html-app FILE         Write scan output as a mini HTML
                         application to FILE.
 
+--cyclonedx FILE        Write scan output as a CycloneDx 1.3 BOM in XML format to FILE
+
+--cyclonedx-json FILE   Write scan output as a CycloneDx 1.3 BOM in pretty-printed JSON format to FILE
+
 .. include::  /rst_snippets/warning_snippets/output_htmlapp_dep.rst

setup.cfg

@@ -198,6 +198,8 @@ scancode_output =
     template = formattedcode.output_html:CustomTemplateOutput
     debian = formattedcode.output_debian:DebianCopyrightOutput
     yaml = formattedcode.output_yaml:YamlOutput
+    cyclonedx = formattedcode.output_cyclonedx:CycloneDxOutput
+    cyclonedx-json = formattedcode.output_cyclonedx:CycloneDxJsonOutput
 
 
 [tool:pytest]