generate_sbom
Generate Software Bill of Materials (SBOM) from package manifests and lockfiles to identify dependencies, detect license compliance issues, and export in standard formats.
Instructions
Generate a Software Bill of Materials (SBOM) from package manifests and lockfiles. Supports npm, Composer, pip, Go, Cargo, Bundler, Maven. Outputs CycloneDX, SPDX, or plain JSON. Includes license compliance warnings for copyleft licenses.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Output format (default: json) | |
| include_dev | No | Include devDependencies (default: false) | |
| include_transitive | No | Include transitive dependencies (default: true) |