Re: [spdx] SBOMs from vcpkg?

2023-04-11 Thread Sebastian Schuberth
Looks like SPDX JSON is generated by default, see [1]. [1]: https://github.com/microsoft/vcpkg/issues/30461#issuecomment-1485245851 -- Sebastian Schuberth On Tue, Apr 11, 2023 at 7:41 PM wrote: > > Hey all, > If anyone happens to be using or familiar with Microsoft's vcpkg tool (using > it

[spdx] SBOMs from vcpkg?

2023-04-11 Thread daniel
Hey all, If anyone happens to be using or familiar with Microsoft's vcpkg tool (using it to manage dependencies for a C++ project), do you know if there's a way to generate an SBOM from it? Their latest release notes said there's some 'experimental' ability to do so, but I haven't actually