build-flow-labs/Blueprint
SBOM generation and vulnerability analysis for software supply chain security
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| command | Command to run: sbom or vuln | yes | — |
| format | SBOM format (cyclonedx-json, cyclonedx-xml, spdx-json) | no | cyclonedx-json |
| path | Path to scan for dependency files (for sbom command) | no | . |
| trivy-results | Path to Trivy JSON results file (for vuln command) | no | — |
| threshold | Vulnerability gate threshold (no_critical, no_critical_high, no_critical_high_medium, no_vulnerabilities) | no | no_critical_high |
| ignore-unfixed | Ignore vulnerabilities without available fixes | no | false |
| output | Output file path for SBOM | no | — |
Outputs
| name | description |
|---|---|
| sbom | Generated SBOM content (JSON) |
| sbom-file | Path to generated SBOM file |
| passes-gate | Whether vulnerability gate passed (true/false) |
| vulnerability-summary | Vulnerability summary as JSON |