https://github.com/alilleybrinker/cargo-spdx
Generate an SPDX Software Bill of Materials for Rust crates.
https://github.com/alilleybrinker/cargo-spdx
rust sbom spdx
Last synced: over 1 year ago
JSON representation
Generate an SPDX Software Bill of Materials for Rust crates.
- Host: GitHub
- URL: https://github.com/alilleybrinker/cargo-spdx
- Owner: alilleybrinker
- License: other
- Created: 2022-05-10T23:42:25.000Z (about 4 years ago)
- Default Branch: main
- Last Pushed: 2022-08-10T00:48:34.000Z (almost 4 years ago)
- Last Synced: 2025-03-17T07:05:50.417Z (over 1 year ago)
- Topics: rust, sbom, spdx
- Language: Rust
- Homepage: https://crates.io/crates/cargo-spdx
- Size: 59.6 KB
- Stars: 19
- Watchers: 4
- Forks: 2
- Open Issues: 5
-
Metadata Files:
- Readme: README.md
- License: LICENSE-APACHE.md
Awesome Lists containing this project
README
# `cargo-spdx`
__`cargo-spdx` is currently in development and not yet ready for use.__
`cargo-spdx` provides a cargo subcommand to generate an
[SPDX][spdx] Software Bill of Materials (SBOM) for a Rust crate.
## Usage
`cargo spdx` creates an SBOM for the current crate.
`cargo spdx build` wraps `cargo build`, producing SBOMs for each produced binary.
See `cargo spdx --help` for more detail.
## Contributing
Anyone is welcome to contribute. You can find the list of open issues
in the issue tracker, or talk with the developers on the
[Rust Secure Code Working Group Zulip channel][zulip]. Make sure to
mention `cargo-spdx` or to tag `alilleybrinker`.
## License
`cargo-spdx` is dual-licensed with the MIT or Apache 2.0 licenses.
[spdx]: https://spdx.dev
[zulip]: https://rust-lang.zulipchat.com/#narrow/stream/146229-wg-secure-code