Re: SBOMs from vcpkg?


Sebastian Schuberth
 

Looks like SPDX JSON is generated by default, see [1].

[1]: https://github.com/microsoft/vcpkg/issues/30461#issuecomment-1485245851

--
Sebastian Schuberth

On Tue, Apr 11, 2023 at 7:41 PM <daniel@...> wrote:

Hey all,
If anyone happens to be using or familiar with Microsoft's vcpkg tool (using it to manage dependencies for a C++ project), do you know if there's a way to generate an SBOM from it? Their latest release notes said there's some 'experimental' ability to do so, but I haven't actually found any documentation.

Thanks in advance!
Daniel

Join spdx@lists.spdx.org to automatically receive all group messages.