SBOM generated for .net project via cyclonedx
-
Clone and complie https://github.com/CycloneDX/cyclonedx-dotnet project to generate CycloneDX.exe
- Download cyclonedx-dotnet code and import to visual studio code
- Unzip cyclonedx-dotnet-master.zip and use Visual Studio 2019 to open CycloneDX.sln. There are 5 projects in this program. Just compile (clt+sft+B) the CycloneDX project in it. Do not build or rebuild or compile the entire program, otherwise there will be a lot of errors.
- After compilation we got CycloneDX.exe under project path [cyclonedx-dotnet\CycloneDX\bin\Debug\netcoreapp3.1\publish\CycloneDX.exe]
-
Setup any .net project for generate SBOM
- Setup test project https://github.com/satyendra22/project-aspnet-dotnet-webapp
-
Use CyCloneDX.exe to generate BOM for the test plan
- Syntax: CycloneDX -o <OUTPUT_DIRECTORY> (path is the directory of .sln, .csproj, .vbproj, or packages.config)
C:<CODE>\cyclonedx-dotnet\CycloneDX\bin\Debug\netcoreapp3.1\publish> .\CycloneDX.exe C:<Proj-Code>project-aspnet-dotnet-webapp\SampleWebApplication -o C:<OUTPATH>\project-aspnet-dotnet-webapp\BOM'- BOM.xml is generated in output directory. generated file added for reference https://github.com/satyendra22/SBOM-generated-for-.net-project-via-cyclonedx/blob/main/bom.xml