qte77/SBOM Generator (Syft + GitHub Depgraph)
Generate SPDX SBOM files via GitHub dependency graph and Syft, optionally opening a PR
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| sbom_dir | Directory to store SBOM output files | no | docs/SBOM |
| python_version | Python version for uv to install | no | 3.12 |
| create_pr | Whether to create a PR with SBOM changes | no | true |
| github_token | GitHub token for API access and PR creation | yes | — |
Outputs
| name | description |
|---|---|
| sbom_dir | Path to the directory containing generated SBOM files |
| changed | Whether SBOM files changed ('true' or 'false') |
| pr_url | URL of the created PR (empty if create_pr is false or no changes) |