1. Spdx
  2. Topics

SBOMs from vcpkg?

daniel@...
 

Hey all,
If anyone happens to be using or familiar with Microsoft's vcpkg tool (using it to manage dependencies for a C++ project), do you know if there's a way to generate an SBOM from it? Their latest release notes said there's some 'experimental' ability to do so, but I haven't actually found any documentation.

Thanks in advance!
Daniel
Sebastian Schuberth
 

Looks like SPDX JSON is generated by default, see [1].

[1]: https://github.com/microsoft/vcpkg/issues/30461#issuecomment-1485245851

--
Sebastian Schuberth

On Tue, Apr 11, 2023 at 7:41 PM <daniel@...> wrote:

Hey all,
If anyone happens to be using or familiar with Microsoft's vcpkg tool (using it to manage dependencies for a C++ project), do you know if there's a way to generate an SBOM from it? Their latest release notes said there's some 'experimental' ability to do so, but I haven't actually found any documentation.

Thanks in advance!
Daniel

1 - 2 of 2