surfactant
https://github.com/llnl/surfactant
Python
Modular framework for SBOM generation that gathers file information and analyzes dependencies
Triage Issues!
When you volunteer to triage issues, you'll receive an email each day with a link to an open issue that needs help in this project. You'll also receive instructions on how to triage issues.
Triage Docs!
Receive a documented method or class from your favorite GitHub repos in your inbox every day. If you're really pro, receive undocumented methods or classes and supercharge your commit history.
Python not yet supported1 Subscribers
Add a CodeTriage badge to surfactant
Help out
- Issues
- Revisit information available from Syft
- Add CycloneDX read SBOM hook implementation
- Input/Output format detection based on file extension
- Gather Docker image information
- Determine how to handle polyglot files
- Gather data on Extended Attributes and Alternate Data Streams/File Forks
- Symlinks don't appear in containerPaths
- JSON schema for validation
- Read in files once.
- Consider supporting protobom input/output format (or internal?)
- Docs
- Python not yet supported