dependencytrack/Upload BOM to Dependency-Track
Uploads a CycloneDX software bill of materials to a Dependency-Track server
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| serverhostname | Dependency-Track hostname | yes | — |
| port | Dependency-Track port | no | 443 |
| protocol | Dependency-Track protocol | no | https |
| apikey | Dependency-Track API key | yes | — |
| project | Project in Dependency-Track | no | — |
| projectname | Project name in Dependency-Track | no | — |
| projectversion | Project version in Dependency-Track | no | — |
| projecttags | Comma-separated list of tags (available in DT v4.12 and later) | no | "" |
| autocreate | Automatically create the project in Dependency-Track if it doesn't exist | no | false |
| bomfilename | Path and filename of the BOM | no | bom.xml |
| parent | Parent project UUID in Dependency-Track (available in DT v4.8 and later) | no | — |
| parentname | Parent project name in Dependency-Track (available in DT v4.8 and later) | no | — |
| parentversion | Parent project version in Dependency-Track (available in DT v4.8 and later) | no | — |
| isLatest | Set the property isLatest to the uploaded Version | no | false |
Outputs
| name | description |
|---|---|
| token | The token response from Dependency-Track after SBOM file upload |
| projectUuid | The UUID of the project the BOM was uploaded to (available in DT v5.0.0 and later) |