zheng-bote/depdiscover
Native C++ Dependency Scanner & SBOM Generator
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| compile-commands | Path to compile_commands.json (Input) | no | compile_commands.json |
| libs | Path to CMake generated libs.txt (Input) | no | libs.txt |
| binary | Path to the executable binary for ELF analysis (Input) | no | — |
| vcpkg | Path to vcpkg.json manifest (Input) | no | vcpkg.json |
| conan | Path to conanfile.txt (Input) | no | conanfile.txt |
| cmake | Path to CMakeLists.txt to find FetchContent (Input) | no | CMakeLists.txt |
| output | Path for the generated JSON file (Output) | no | — |
| html | Path for the generated HTML report (Optional) | no | — |
| cyclonedx | Path for the generated CycloneDX 1.4 SBOM (Optional) | no | — |
| ecosystem | OSV Ecosystem for CVE checks (Default: Debian) | no | Debian |
| fail-on-cvss | Build Breaker: Exit 1 if CVSS-Score >= SCORE (e.g., 7.0) | no | — |
| suppressions | Path to JSON file with suppressed CVEs (Optional) | no | — |
| project-name | Project name to appear in the report header | no | GitHub Project |
Outputs
no outputs