CycloneDX / cyclonedx-dotnet

Creates CycloneDX Software Bill of Materials (SBOM) from .NET Projects

Home Page:https://cyclonedx.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

DLLs missing from SBOM

ag-lls opened this issue · comments

commented

Hi there,

is it possible for the tool to include DLLs that are listed in the projects references?
Not all of our used libraries are available as NuGet Packages, so as of right now it seems our SBOM would be incomplete, since the DLLs are not listed.

So far, that's not possible. You can manually maintain them in another BOM and then combine them using CycloneDX cli's merge function.

See also #79

Linked to #785