cryptosoftinc/CryptoSoftInc-SBOM

This action builds a CycloneDX Format Software Bill of Materials (SBOM) for a repository and sends it to an OWASP DT server

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Mar 11, 2025
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: cryptosoftinc/dependency-track-javascript@b6e6bc0a196ccded4296d9020e07db53fe0409b2 # 1.0.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
dt-urlThe URL of the Dependency-Track API server to send the SBOMyes
api-keyThe API key used to authenticate with the Dependency-Track API server.yes
project-nameProject name.yes
project-versionProject version.yes
parent-nameParent Project name.no
parent-versionParent Project version.no

no outputs