cyclonedx/gh-php-composer-generate-sbom

GitHub action to generate a CycloneDX SBOM for PHP Composer

GitHub action to generate a CycloneDX SBOM for PHP Composer projects

Example usage

uses: CycloneDX/gh-php-composer-generate-sbom@v1

Internals

This action utilizes cyclonedx/cyclonedx-php-composer:<4. See cyclonedx/cyclonedx-php-composer on Packagist.

gh-php-composer-generate-sbom's Issues

:mega: migrate to `cyclonedx/cyclonedx-php-composer >= 4` ???

current implementation of this GitHub action uses an outdated and unmaintained version of cyclonedx/cyclonedx-php-composer < 4.

should this GitHub action be migrated to cyclonedx/cyclonedx-php-composer >= 4?
If you like the idea, give this issue thumbs up, or write a comment.

new breaking version with V4

V4 of https://github.com/CycloneDX/php-composer will have breaking changes.
This must be addressed here somehow. robably with a major version release here.

document configuration

after CycloneDX/cyclonedx-php-composer#131
is in place: write how to configure in the README.