lfreleng-actions/Python SBOM Generator
Generates CycloneDX SBOM reports for Python projects
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jul 8, 2026
- License
- None
Pinned Snippet
uses: lfreleng-actions/python-sbom-action@60648e3351a48617d40f68ccb1f143e050f74c96 # v0.1.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| python_version | Python version to use for SBOM generation | no | 3.12 |
| include_dev | Include development dependencies in SBOM | no | false |
| sbom_format | SBOM output format: 'json', 'xml', or 'both' | no | both |
| sbom_spec_version | CycloneDX specification version to use | no | 1.5 |
| filename_prefix | Base filename for SBOM output (without extension) | no | sbom-cyclonedx |
| output_directory | Directory where SBOM reports will be written | no | . |
| path_prefix | Directory location containing project code | no | . |
| fail_on_error | Fail the action if SBOM generation encounters errors | no | true |
Outputs
| name | description |
|---|---|
| sbom_json_path | Path to generated JSON SBOM file |
| sbom_xml_path | Path to generated XML SBOM file |
| dependency_manager | Detected Python dependency manager |
| component_count | Number of components in the generated SBOM |