ccideas

Generates a Software Bill of Materials as part of a Bitbucket Pipeline for various project types

Generates a CycloneDX compliant Software Bill of Materials for a node/npm project

Bitbucket Pipe: Open tools for CycloneDX/SPDX sBOM analysis.

Bitbucket pipe to generate a CycloneDX sBOM for Java, Go, Python & Node projects

Generates a CycloneDX sBOM for a project and scans the sBOM for OSS vulnerabilities using the OSV DB