anansi-solutions/SBOMlet
Generate or gate a third-party licence inventory (SBOM) for the repository.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| mode | `check` to gate the committed inventory (default), or `generate` to write it. | no | check |
| policy | Path to the policy file, relative to the repo root. Defaults to .sbomlet.policy.toml (also auto-discovered when present); omit or point elsewhere for a custom path or no gate. | no | .sbomlet.policy.toml |
| docker | Set to any non-empty value to build and scan the repository's Dockerfiles and refresh the committed docker OS SBOM before generating. Needs a Docker daemon; pair with `mode: generate`. | no | "" |
Outputs
no outputs