pnpm
[sbom]: missing CPE field #16949
huyhoang8398
started this conversation in
General
[sbom]: missing CPE field
#16949
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Currently we are using syft + dependency tracker ( owasp ) to generate the sbom file and visualize/scan CVE
and the tool provide a cpe attribute so dependency tracker can use that cpe to scan the CVE.
But in pnpm sbom that attribute seems missing and only provides the purl
Is it possible to implement feature?
All reactions