Introduction

You can now generate CBOM for Python applications. It is as easy as invoking the cbom command.

cbom -t python

cdxi REPL can natively understand CBOM. Simply load the generated CBOM, and try the new commands .cryptos and .provides.

We have also added support for compliance-as-code via standards. Invoke cdxgen with the new --standard arguments to automatically include their definitions.

Example:

cdxgen -t java --standard asvs-4.0.3

What's Changed

• Add support for executing dependencies task in parallel for Gradle by @ajmalab in #1007
• Feature/swh by @prabhu in #1012
• Update jdk to 21.0.3-tem by @prabhu in #1013
• Remove bun frozen install mode by @prabhu in #1017
• Python cbom by @prabhu in #1026
• Update atom. Regenerate types by @prabhu in #1028
• Support for standard templates by @prabhu in #1029

Full Changelog: v10.4.3...v10.5.0