Skip to content

Latest commit

 

History

History
33 lines (25 loc) · 912 Bytes

ossindex.md

File metadata and controls

33 lines (25 loc) · 912 Bytes
Raw

OSS Index

In order to use bomber with the Sonatype OSS Index you need to get an account. Head over to the site, and create a free account, and make note of your username (this will be the email that you registered with).

Once you log in, you'll want to navigate to your settings and make note of your API token. Please don't share your token with anyone.

Once you have your token,

# Using a provider that requires credentials (ossindex)
bomber scan --provider=ossindex --username=xxx --token=xxx sbom.json

Supported ecosystems

At this time, the Sonatype OSS Index supports the following ecosystems:

  • Maven
  • NPM
  • Go
  • PyPi
  • Nuget
  • RubyGems
  • Cargo
  • CocoaPods
  • Composer
  • Conan
  • Conda
  • CRAN
  • RPM
  • Swift