Introduction
cdxgen can now generate SBOM for multiple package types in a single execution. Some examples:
Example 1: Include js and dotnet packages.
-t js -t dotnet
Example 2: Exclude js alone and include other types
--exclude-type js
This also works for Java applications that use both maven and gradle. A single invocation with -t java
will automatically invoke and collect packages from both maven and gradle!
What's Changed
- Adds MIT-0 by @prabhu in #1197
- Update atom to get fix for parsedeps command. Added additional unit test by @prabhu in #1196
- Set max buffers for npm install. Print stdout in debug by @prabhu in #1200
- Update node gyp to support python 3.12 by @prabhu in #1201
- Disable pip caching in container image by @prabhu in #1204
- Multi project types by @prabhu in #1202
- Fix issues with multi-threaded Gradle sbom gen by @ajmalab in #1205
- Do not aggressively exclude while dealing with java projects by @prabhu in #1207
- Feat: Improve dev-friendliness for snapshot tests. by @cerrussell in #1213
- Update atom to get parsedeps improvements by @prabhu in #1211
- Fix: Add python alias to dockerfile-deno by @aryan-rajoria in #1216
- Support for Rancher Desktop on mac by @prabhu in #1219
- Support for invoking multiple package managers for java by @prabhu in #1217
- Fix: change PYTHON_CMD to python3.12 in all docker files by @aryan-rajoria in #1220
- Updated atom. Added messages to promote new maven and gradle features by @prabhu in #1223
Full Changelog: v10.7.1...v10.8.0