Skip to content

Generate SBOM in CycloneDX 1.5 format #807

Description

@DennisClark

CycloneDX 1.5 has been released. SCIO should have an option to generate an SBOM in that format. The following link should be useful:

https://cyclonedx.org/guides/sbom/use_cases/#license-compliance

In particular, there is a property (new, I think) in licensing called evidence that could be an appropriate place to list "other" licenses that are found in a package. See attached image.

There is also a discussion about the 1.5 format here
aboutcode-org/scancode-toolkit#2987

cyclonedx-1 5-evidence

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Type

No type

Projects

No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions