This project generates a Software Bill of Materials (SBOM) for Chisel projects. The SBOM is generated in the SPDX format using the metadata from the Chisel jsonwall manifest.
To build the project, run the following command:
go build ./cmd/chisel-sbom
./chisel-sbom /path/to/manifest.wall [/path/to/output.spdx.json]
If there is no output file specified, the SBOM will be generated to a manifest.spdx.json
file
in the same directory of the manifest.wall
file.