Covenant | Generate SBOMs and Reports with Covenant
Covenant is an SBOM generation tool using source code artifacts with the command line interface. It can generate both CycloneDX and SPDX formatted SBOM files. Covenant can also create HTML reports for its SBOM files, as well as perform compliance checks on SBOM files.
NOTE: Covenant requires all projects to have been built and all dependencies to have been restored to make an as accurate analysis as possible.
Chapters
0:00 Intro
0:45 Installation
1:11 Functionality
1:25 Generation Using Directory
2:28 Generation Using the SLN File
2:43 Generation Flags
4:00 Creating HTML Report
5:06 Viewing HTML Report
5:24 Converting to SPDX and CycloneDX
6:55 Viewing SPDX SBOM
7:03 Compliance Check
7:47 Final Thoughts
8:19 Thanks For Watching!
Resources
🎯 GitHub: https://github.com/patriksvensson/cov...
🎯 Learn More About SPDX: https://spdx.dev/
🎯 Learn More About CycloneDX: https://cyclonedx.org/
More Great SBOM Resources!
🌐 https://learnsbom.com
Contact Us!
📨 [email protected]
#sbom