tiiuae / sbomnix

A suite of utilities to help with software supply chain challenges on nix targets

tiiuae/sbomnix Issues

Can this be done globally - or just per-package?
Updated a month ago1
Packaging latest version in nixpkgs: "error: illegal path references in fixed-output derivation"
Closed 3 months ago9
Example or documentation on how to use it via an API
Updated 4 months ago4
only produce `output_path` for the actually-used output
Closed 4 months ago3
Add option to scan nix profile?
Updated 6 months ago8
improve the way sbomnix reads pacakge metadata
Closed 7 months ago4
vulnxscan: add severity information
Closed 10 months ago1
scanning can take a long time, is there any ability to keep / cache the results for n days?
Closed a year ago2
sbomnix: support aarch64-darwin
Closed a year ago1
TypeError: sequence item 0: expected str instance, list found
Closed a year ago2
sbomnix: add option to include only direct dependencies
Closed a year ago1
sbomnix: go and rust dependencies
Updated a year ago2
allow reading runtime dependencies without requiring the package availability in local nix store
Closed a year ago1
rewrite mapping nix packages to cpe identifiers
Updated a year ago1
nixgraph: allow loading state
Updated a year ago
add tips&tricks page
Updated a year ago
vulnxscan fails if the Nix output path is a JSON file
Closed a year ago3
how to `nix build` vulnxscan?
Closed a year ago3