Contributor
Sushant Kumar

Support CycloneDX report


Mentors
Gaurav Mishra, Avinal Kumar, HastagAB, Kaushlendra
Organization
FOSSology
Technologies
python, postgresql, c++, php
Topics
license compliance, SBOM
Currently, FOSSology generates SBOM in SPDX format, which allows for integration with various tools. However, CycloneDX is another popular format for generating SBOMs. By integrating CycloneDX report generation in FOSSology, it will be possible to work with other tools that use CycloneDX. Although a PHP library exists for generating CycloneDX reports, it cannot be used because it is licensed under Apache-2.0, while FOSSology is under GPL-2.0. Therefore, a custom implementation of CycloneDX report generation in FOSSology is necessary. So the main goal of this project focuses on the implementation of CycloneDX report generation in FOSSology.