BSD Ports

ports-mgmt/sbom-generator 1.0 FreeBSD

Create SPDX SBOM files for installed packages

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Port added
Last update
Commit
07747390ec
License
BSD2CLAUSE
Categories
ports-mgmt

Description

sbom-generator creates SPDX documents for installed packages.

Each package installs an SBOM file in the share/sbom/pc directory. The file uses the pc(5) format. sbom-generator reads these files. For each file, it creates two documents:

  • An SPDX 2.2 document (.spdx) in the share/sbom/spdx-2.2 directory. It uses bomtool.
  • An SPDX 3.0.1 document (.jsonld) in the share/sbom/spdx-3.0.1 directory. It uses spdxtool.

Each document includes the dependencies of the package. It also includes the dependencies of each dependency.

Version history 1

  1. 1.0 07747390ec

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

pkg install sbom-generator

From the ports tree:

cd /usr/ports/ports-mgmt/sbom-generator/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	sbom-generator>0:ports-mgmt/sbom-generator

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest-----
FreeBSD:14:quarterly--n/a--
FreeBSD:15:latest--n/a--
FreeBSD:15:quarterly--n/an/an/a
FreeBSD:16:latest--n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

As this port's Makefile names them.

Runtime 2

The full lists below include those, and their dependencies in turn.

Run dependencies 1

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Files

No file lists for this port.

Commit history 1

DateCommitCreditsLog message
07747390ec Mathieu Arnold ports-mgmt/sbom-generator: create SPDX SBOM files for installed packages