erlef / mix_sbom

69%

LAST BUILD ON BRANCH main

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• bchassoul/hex-core
• bchassoul/links
• bchassoul/pretty-opt
• bchassoul/spdx
• ci
• dependabot/github_actions/github-actions-000d3d314b
• dependabot/github_actions/github-actions-039c057ac1
• dependabot/github_actions/github-actions-30316252c6
• dependabot/github_actions/github-actions-415a518de2
• dependabot/github_actions/github-actions-45419baed2
• dependabot/github_actions/github-actions-7488430f0f
• dependabot/github_actions/github-actions-7a6ad63ce6
• dependabot/github_actions/github-actions-81d631def5
• dependabot/github_actions/github-actions-8e8a7fd0ce
• dependabot/github_actions/github-actions-94dc8f1485
• dependabot/github_actions/github-actions-f7e9886b4e
• dependabot/hex/mix-dependencies-87b0b0fca8
• gh_action
• iciac/add-component-authors
• iciac/add-component-descr
• iciac/add-components-hashes
• iciac/rename-bomrefs
• jm/429_fix
• jm/action_test
• jm/bpb
• jm/burrito_enable_conditional
• jm/cli
• jm/coveralls_fix
• jm/cyclone_17_smoke_tests
• jm/decode
• jm/description
• jm/devenv_update
• jm/escript_elixir_fix
• jm/flaky_test_fix
• jm/format_equivalence
• jm/full_otp_purl
• jm/groups
• jm/hex_publish_ci
• jm/optimus
• jm/prod_hint
• jm/public_api
• jm/public_cyclonedx_interface
• jm/smoke_test_minimize
• jm/stdout
• jm/umbrella
• jm/umbrella_fix
• jm/xml_unicode_fix
• main
• otp_app_version
• readme
• renovate/erlang-28.x
• smoke_tests
• sosef/distribution_url_fix
• sosef/exclude-docs
• sosef/ort_action
• sosef/otp-links
• sosef/system_enable
• update-optimus
• vers_support

Build # 22181462339

Build Type

push

github

Committed by web-flow

Commit Message

Add component.group field to CycloneDX SBOMs (#91)

Implements #64: Components are now categorized by their origin using
the CycloneDX group field:

- Erlang OTP apps → "erlang.otp"
- Elixir stdlib apps → "elixir.stdlib"
- Hex app → "hex"
- Hex packages → repo name (e.g., "hexpm", "hexpm:myorg")
- Git packages → org or user from git URL (where supported)
- Path dependencies → nil

Run Details

17 of 17 new or added lines in 5 files covered. (100.0%)

853 of 1242 relevant lines covered (68.68%)

1026.94 hits per line