Leon Lux

icon indicating a website link https://www.1ux.dev/

icon location Germany icon location Applied computer science student.

Results 24 comments of Leon Lux

Question: Is there a reason why there is no command line option to sign the generated sbom-file using a given key?

Hi there, I would be interested to work on this as my first contribution as this is relevant to me. What exactly would be the requirements for this? As I...

Question: Is there a reason why there is no command line option to sign the generated sbom-file using a given key?

I've checked it out and i think it would make sense to support it for XML and JSON. The CLI indeed seems to be a bit ot of date. I...

Question: Is there a reason why there is no command line option to sign the generated sbom-file using a given key?

@mtsfoni I opened a PR addressing that. It currently mirrors the functionality of the CLI, allowing to sign XML BOMs with RSA. I also opened an Issue on the Repo...

Support for Signing with X509 certificates

Would you be open for Contributions in regard to adding support for signing xml BOMs? I also read up about Signed JSON, it seems that there are some standards for...