CycloneDX / cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

https://cyclonedx.org/

CycloneDX/cyclonedx-dotnet Issues

CycloneDX should fail when the provided project file was not found
Closed 9 days ago3
Inconsistent Timestamp Representation in XML and JSON BOM Files
Closed 18 days ago3
Exclude developer dependencies is not reflecting real runtime dependencies
Updated a month ago2
BOM should include Framework Components
Updated a month ago4
Set additional properties when generating sbom for nugets
Updated a month ago3
Scope property is always being set to required
Updated a month ago4
Utilize package mapping to source additional information
Updated a month ago1
Support providing a solution filter
Updated 2 months ago5
CI: `set-output` command is deprecated
Updated 2 months ago1
Possible Bug: Metadata CycloneDX-version is taken over as SBOM version
Updated 2 months ago1
System.UnauthorizedAccessException thrown if .csproj file is read-only
Closed 3 months ago3
"Unable to locate valid bom ref" when AssemblyName is != project name in referenced project
Closed 3 months ago15
dotnet CycloneDX Use these two parameters: --exclude-test-projects --exclude-dev why doesn't it work? I want to delete the name in the box
Closed 5 months ago4
File Globbing ProjectReferences not supported
Closed 5 months ago3
Exclude test and development dependencies by default
Updated 5 months ago2
On Linux: An error occurred trying to start process '/usr/local/share/dotnet/dotnet' with working directory '/builds'. No such file or directory
Closed 5 months ago11
Crash when using -rs with referenced project that has multiple target frameworks
Closed 5 months ago4
Issue with Project References during sln analysis
Closed 5 months ago2
SBOM for Unity-project created without any components
Closed 5 months ago2
Arguments setName/-Version/-Type should override Metadata
Updated 5 months ago
Metadata timestamp not being tested
Updated 5 months ago
Floating versions not supported since version 3.0.0
Closed 5 months ago4
Metadata timestamp not being tested
Closed 5 months ago3
Detect output format from output filename if provided
Updated 5 months ago1
With using a private Nuget Feed (Azure DevOps) we get an 401 Unauthorized error
Updated 5 months ago4
Add Protobuf output support
Updated 6 months ago1
After updating to CycloneDX.Core 6.0: Add CycloneDX as Component instead of as Tool(deprecated) to the Metadata.
Updated 6 months ago1
Test Triage
Closed 6 months ago
Add results of Nuget Vulnerabilities scan to bom?
Updated 6 months ago
Read GitHub credentials from environment variables
Updated 6 months ago
Read metadata automatically from base BOM .cdx/base.[xml|json|bin]
Updated 6 months ago
Reimplement the tool as a DLL with a frontend console app?
Closed 6 months ago8
Replace "Microsoft.DotNet.PlatformAbstractions" with existing .NET platform implementation
Closed 6 months ago
Call via dotnet cyclonedx .... doesn't pass shortname parameter -d to cyclonedx
Closed 6 months ago1
Dependency tree includes via --exclude-dev excluded development dependencies.
Closed 6 months ago2
Unable to find bom ref for solutions which depend both on the project and the package of a library
Closed 6 months ago12
DLLs missing from SBOM
Closed 9 months ago3
Include project-references as components in SBOM [Mega-Issue]
Closed 6 months ago
Can't generate BOM in case of different .NET Standard versions
Closed 6 months ago4
Tests fail when running parallel
Updated 6 months ago
Output file(Bom.XML) not getting generated
Closed 7 months ago4
Dotnet8 support?
Closed 7 months ago5
Missing components supplier
Closed 7 months ago3
Remote Code Execution Vulnerability nuget package NuGet.Protocol V6.5.0 (CVE-2023-29337)
Closed 8 months ago
Validation of generated JSON-formatted bom fails
Closed 8 months ago2
Feature request: Generate timestamp or set timestamp with command line parameter
Closed 8 months ago
Invalid BOM generated
Closed 9 months ago2
Multiple versions of same package in BOM
Closed 9 months ago1
Cannot install the nuget
Closed 9 months ago4
Cannot create BOM with NTIA minimum requirements
Closed 10 months ago1