https://github.com/cyclonedx/gh-cocoapods-generate-sbom
GitHub action to generate a CycloneDX SBOM for Swift and Objective-C projects that use CocoaPods.
https://github.com/cyclonedx/gh-cocoapods-generate-sbom
bill-of-materials bom cocoapods cyclonedx github-action objective-c owasp sbom sbom-generator software-bill-of-materials swift
Last synced: 4 months ago
JSON representation
GitHub action to generate a CycloneDX SBOM for Swift and Objective-C projects that use CocoaPods.
- Host: GitHub
- URL: https://github.com/cyclonedx/gh-cocoapods-generate-sbom
- Owner: CycloneDX
- License: apache-2.0
- Created: 2023-02-03T20:42:05.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2023-03-29T14:48:24.000Z (about 2 years ago)
- Last Synced: 2025-03-05T09:03:15.031Z (4 months ago)
- Topics: bill-of-materials, bom, cocoapods, cyclonedx, github-action, objective-c, owasp, sbom, sbom-generator, software-bill-of-materials, swift
- Homepage: https://cyclonedx.org
- Size: 7.81 KB
- Stars: 1
- Watchers: 5
- Forks: 2
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# gh-cocoapods-generate-sbom
GitHub action to generate a CycloneDX SBOM for Swift and Objective-C projects that use CocoaPods.
> This action uses [*cyclonedx-cocoapods*](https://github.com/CycloneDX/cyclonedx-cocoapods) to generate SBOMs.
## Inputs
### `version`
The version of *cyclonedx-cocoapods* to use.
Minimum allowed version is v1.0.0. Must be an [existing semantic version](https://github.com/CycloneDX/cyclonedx-cocoapods/releases).
## Example usage
Add the following entry to your Github workflow YAML file:
```
uses: CycloneDX/cyclonedx-cocoapods
with:
path: '.'
```
### Example using all optional inputs:
```
uses: CycloneDX/cyclonedx-cocoapods
with:
path: "."
version: 1.1.1 # optional
bom_version: 1 # optional
component_type: application # optional
component_group: com.example # optional
component_name: App # optional
component_version: 0.0.1 # optional
exclude_test: true # optional
output: bom.xml # optional
```