Tool Review: CycloneDX PHP Composer Plugin + GitHub Action
Summary
The CycloneDX PHP Composer Plugin is for PHP projects using the Composer dependency manager to create SBOMs. In this video, we will show how to install the tool with composer and use composer's lock files to generate SBOMs. As a bonus, we'll also show how to use the GitHub action that also uses the tool.
Chapters
0:00 Intro
0:26 Installing the Plugin
0:43 Method 1: SBOM Gen Inside Project
1:00 Troubleshooting: Missing Lock File
1:40 Method 1 with Lock File
2:10 Method 2: SBOM Gen with Additional Options
2:50 Setting Up GitHub Action
3:22 Example Action
4:03 Failed Attempt
4:20 Troubleshooting: Plugin Lacks Permission
4:45 Granting Plugin Permission
5:36 Successful Attempt
6:10 Viewing the Results
6:32 Final Thoughts
6:44 Thank You for Watching!
Resources
🎯 Github: https://github.com/CycloneDX/cycloned...
🎯 GitHub Action: https://github.com/CycloneDX/gh-php-c...
🎯 More About Composer: https://getcomposer.org/
🎯 Learn More About CycloneDX: https://cyclonedx.org/
More Great SBOM Resources!
🌐 https://learnsbom.com
Contact Us!
📨 [email protected]