pixi-sbom

介绍

pixi-sbom is a Pixi extension that generates Software Bills of Materials (SBOMs) from Pixi manifests and lock files, supporting dependency visibility, reproducibility, and supply-chain security workflows.

翻译准备中

取自仓库 README

README

正在加载完整 README。 以下为已保存的摘录。

A pixi extension that generates a Software Bill of Materials (SBOM) from a pixi.lock file, in CycloneDX 1.6 / 1.7 or SPDX 2.3 / 3.0.1 JSON. Full documentation: https://millsks.github.io/pixi-sbom/ What 1.0 freezes, and what it does not: stability.md Found a vulnerability? SECURITY.md says where to send it privately and what is in scope. Each report has a recording of its own in the command-line reference: vulnerabilities, licenses, packages, diff, python, phantom, outdated and scorecard. [README 설치·사용 부분 발췌] Installation