Postgres Pro
Downloads
Home   >   mailing lists

Re: Software Bill of Materials (SBOM) - Mailing list pgsql-general

From Кристина Валентей
Subject Re: Software Bill of Materials (SBOM)
Date
Msg-id CAAnBbHFAPvUPdMSRehL3ACEa+H0xrTMuT7GdV2gkdpz6XcRhxg@mail.gmail.com
Whole thread Raw
In response to Re: Software Bill of Materials (SBOM)  (Julian Coccia <julian.coccia@scanoss.com>)
List pgsql-general
Tree view
thank you Julian for your answer.

SCANOSS is very good, but it is probably not suitable for searching external libraries that POSTGRESQL uses.

Therefore, I again ask you to tell me if there is a ready-made SBOM file for project POSTGRESQL, or a tool that can create it based on the source code C

сб, 13 янв. 2024 г. в 14:10, Julian Coccia <julian.coccia@scanoss.com>:

Hi Cristina,

 

Have you tried SCANOSS?

 

To install:

pip3 install scanoss

 

To generate your SBOM (SPDX lite):

scanoss-py scan --format spdxlite DIRECTORY/

 

Alternatively, in CycloneDX format instead:

scanoss-py scan --format cyclonedx DIRECTORY/


Hope this helps.

 

Regards,

Julian

 

From: Кристина Валентей <klsst1nv0@gmail.com>
Date: Saturday, 13 January 2024 at 12:03
To: pgsql-general@lists.postgresql.org <pgsql-general@lists.postgresql.org>
Subject: Software Bill of Materials (SBOM)

Good afternoon.
I'm looking for a way to build sbom files for assembly postgresql, to perform software composition analysis (SCA).

Please, tell me how can I do this?

Thank you.

pgsql-general by date:

Previous
From: Adrian Klaver
Date:
Subject: Re: Unable to find column
Next
From: Eyüp Liste
Date:
Subject: RE: data migration using EXTENSION tds_fdw