DEV Community

Cover image for Generate SBOM
Stefan Alfbo
Stefan Alfbo

Posted on

3

Generate SBOM

Perhaps the easiest way to generate a SBOM file is to use GitHub which relative recently added that as feature, Introducing self-service SBOMs.

This feature can be found at the Dependency graph section which is located in the Insights-tab of your project. In that view there is a button to export a SBOM file in the SPDX format.

However if you don't use GitHub then there is a lot of other tools to use, maybe this link, awesome-sbom, can be a good start.

If you have a dotnet project then you can use the sbom-tool from Microsoft like this:

# Go to the root of your project
dotnet tool install Microsoft.Sbom.DotNetTool
Enter fullscreen mode Exit fullscreen mode

Which will add the tool to the tools config file of your project.

# Will output some help on how to use the tool
dotnet tool run sbom-tool
Enter fullscreen mode Exit fullscreen mode

Heroku

Simplify your DevOps and maximize your time.

Since 2007, Heroku has been the go-to platform for developers as it monitors uptime, performance, and infrastructure concerns, allowing you to focus on writing code.

Learn More

Top comments (0)

Billboard image

The Next Generation Developer Platform

Coherence is the first Platform-as-a-Service you can control. Unlike "black-box" platforms that are opinionated about the infra you can deploy, Coherence is powered by CNC, the open-source IaC framework, which offers limitless customization.

Learn more

👋 Kindness is contagious

Discover a treasure trove of wisdom within this insightful piece, highly respected in the nurturing DEV Community enviroment. Developers, whether novice or expert, are encouraged to participate and add to our shared knowledge basin.

A simple "thank you" can illuminate someone's day. Express your appreciation in the comments section!

On DEV, sharing ideas smoothens our journey and strengthens our community ties. Learn something useful? Offering a quick thanks to the author is deeply appreciated.

Okay