How to add python version? #48

Activity

1. stevespringett commented on Feb 19, 2020

   

   stevespringett

   on Feb 19, 2020

   Member

   More actions

   Not sure I understand the question. Do you want to include the Python version used for runtime or compiling in the bom as another component?

   If so, there isn't a direct way to do this, however, the CycloneDX spec was intentionally designed to be simplistic to account for the dynamic addition of runtime and environmental dependencies not part of the build itself. In this case, you could simply create an XML fragment with the Python component information and use one of the many XML CLI utilities to append the fragment in the components node.

   The Node version does something similar where it can optionally merge multiple boms together.
2. coderpatros commented on Sep 3, 2020

   

   coderpatros

   on Sep 3, 2020

   Member

   More actions

   Closing this due to inactivity.
3. coderpatros

   closed this as completedon Sep 3, 2020
4. KramNamez commented on Jul 25, 2022

   

   KramNamez

   on Jul 25, 2022

   More actions

   Can I ask why there's no direct way to include the runtime Python version in the SBOM?

   I would have naively thought that it's an important dependency, too.
5. CycloneDX

   locked and limited conversation to collaborators on Jul 25, 2022
6. jkowalleck

   converted this issue into a discussion #393 on Jul 25, 2022