Aquesta és una versió anterior. La versió actual és la 4.1.5. SBOM Tool 4.1.5 · Data de publicació:
Fitxers d’instal·lació 3.1.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
⚙️ Changes
- Add interface pin, split IConfiguration to be non-breaking by @DaveTryon (#919)
- Update metadata contract to be backcompatible with SPDX 2.2 parser by @pragnya17 (#918)
- Remove unnecessary parser errors which disallow syft SBOMs by @sfoslund (#917)
- Disable CodeQL until they fix the osx-arm64 problem by @DaveTryon (#916)
- build(deps): bump github/codeql-action from 3.28.3 to 3.28.8 by @dependabot[bot] (#914)
- Specify correct image for running on osx-arm64 by @DaveTryon (#913)
- Update MSTest to metapackage and MTP by @Youssef1313 (#881)
- build(deps): bump actions/setup-dotnet from 4.2.0 to 4.3.0 by @dependabot[bot] (#911)
- Target E2E tests with net472 only on Windows by @DaveTryon (#910)
- Bump GitHub Actions versions in sample code by @rufer7 (#908)
- build(deps): bump MSTest.TestAdapter from 3.7.2 to 3.7.3 by @dependabot[bot] (#905)
- build(deps): bump MSTest.TestFramework from 3.7.2 to 3.7.3 by @dependabot[bot] (#906)
- Enable MSTest analyzers by @Youssef1313 (#898)
- Address a targeted set of analyzer warnings by @DaveTryon (#901)
- Revert extra dependency that we added in #758 by @DaveTryon (#902)
- Update CLI arg help text by @sfoslund (#899)
- Bump component-detection from 5.1.6 to 5.2.1 by @DaveTryon (#894)
- Remove FluentAssertions from tests by @DaveTryon (#896)
- build(deps): bump release-drafter/release-drafter from 6.0.0 to 6.1.0 by @dependabot[bot] (#883)
- build(deps): bump Scrutor from 5.1.0 to 6.0.1 by @dependabot[bot] (#872)
- build(deps): bump github/codeql-action from 3.28.0 to 3.28.3 by @dependabot[bot] (#892)
- build(deps): bump coverlet.collector from 6.0.3 to 6.0.4 by @dependabot[bot] (#882)
- build(deps): bump stefanzweifel/git-auto-commit-action from 5.0.1 to 5.1.0 by @dependabot[bot] (#861)
- build(deps): bump System.Threading.Channels from 9.0.0 to 9.0.1 by @dependabot[bot] (#871)
- Bump MSTest.Test* from 3.7.0 to 3.7.2 by @DaveTryon (#891)
- Add a workflow to comment on API changes by @DaveTryon (#885)
- Switch DataTestMethod to DataTestMethod (part 2) by @DaveTryon (#880)
- Switch DataTestMethod to TestMethod by @Youssef1313 (#849)
- Add skipBuildTagsForGitHubPullRequests setting to PR pipeline by @sfoslund (#879)
- Reenable SBOM targets e2e test by @sfoslund (#876)
- Remove GH action PR build by @sfoslund (#875)
- Add ADO PR build by @sfoslund (#874)
- Spdx 3.0 Parser for SBOM files by @pragnya17 (#860)
- Revert bump to Microsoft.Extensions.DependencyModel (Revert part of #847) by @DaveTryon (#851)
- Pin ubuntu runner to 22.04 by @DaveTryon (#856)
- build(deps): bump Microsoft.Extensions.DependencyModel from 8.0.2 to 9.0.0 by @dependabot[bot] (#847)
- Decouple test packages from release bits by @DaveTryon (#850)
- build(deps): bump coverlet.collector from 6.0.2 to 6.0.3 by @dependabot[bot] (#846)
- Revert "build(deps): bump Microsoft.Extensions.DependencyModel" by @DaveTryon (#845)
- build(deps): bump FluentAssertions from 6.12.2 to 7.0.0 by @dependabot[bot] (#818)
- build(deps): bump Microsoft.Extensions.DependencyModel from 8.0.2 to 9.0.0 by @dependabot[bot] (#784)
- build(deps): bump github/codeql-action from 3.27.9 to 3.28.0 by @dependabot[bot] (#840)
- build(deps): bump Scrutor from 5.0.2 to 5.1.0 by @dependabot[bot] (#842)
- build(deps): bump actions/setup-dotnet from 4.1.0 to 4.2.0 by @dependabot[bot] (#843)
- build(deps): bump github/codeql-action from 3.27.6 to 3.27.9 by @dependabot[bot] (#832)
- build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.2 by @dependabot[bot] (#838)
- Defining and generating spdx 3.0 json elements by @pragnya17 (#830)
- Add running unit tests to CI pipeline by @sfoslund (#835)
- Made the Timeout in LicenseInformationService configurable via CLI argument (#584) by @kidcline1 (#773)
- build(deps): bump github/codeql-action from 3.27.5 to 3.27.6 by @dependabot[bot] (#825)
- build(deps): bump NuGet.Configuration from 6.11.1 to 6.12.1 by @dependabot[bot] (#817)
- build(deps): bump MSTest.TestAdapter from 3.6.3 to 3.6.4 by @dependabot[bot] (#823)
- build(deps): bump MSTest.TestFramework from 3.6.3 to 3.6.4 by @dependabot[bot] (#824)
- Use the fully qualified name for the Zip and Unzip tasks by @bstadick (#803)
- Add missing linefeed from API sample by @DaveTryon (#819)
- build(deps): bump System.Threading.Channels from 6.0.0 to 8.0.0 by @dependabot[bot] (#635)
- build(deps): bump codecov/codecov-action from 5.0.2 to 5.0.7 by @dependabot[bot] (#810)
- build(deps): bump github/codeql-action from 3.27.4 to 3.27.5 by @dependabot[bot] (#809)
- build(deps): bump Scrutor from 5.0.1 to 5.0.2 by @dependabot[bot] (#779)
- build(deps): bump NuGet.Frameworks from 6.11.1 to 6.12.1 by @dependabot[bot] (#785)
- build(deps): bump Microsoft.VisualStudio.Threading.Analyzers from 17.11.20 to 17.12.19 by @dependabot[bot] (#790)
- Unbreak build pipeline after most recent drop of Analyzers by @DaveTryon (#813)
- build(deps): bump Microsoft.NET.Test.Sdk and Newtonsoft.Json by @dependabot[bot] (#808)
- build(deps): bump System.Threading.Tasks.Extensions from 4.5.4 to 4.6.0 by @dependabot[bot] (#792)
- build(deps): bump MSTest.TestFramework from 3.6.2 to 3.6.3 by @dependabot[bot] (#793)
- build(deps): bump FluentAssertions from 6.12.1 to 6.12.2 by @dependabot[bot] (#781)
- build(deps): bump MSTest.TestAdapter from 3.6.2 to 3.6.3 by @dependabot[bot] (#794)
- Bump System.Net.Http version by @sfoslund (#806)
- build(deps): bump github/codeql-action from 3.27.0 to 3.27.4 by @dependabot[bot] (#799)
- build(deps): bump Microsoft.IO.Redist from 6.0.1 to 6.1.0 by @dependabot[bot] (#787)
- build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 by @dependabot[bot] (#805)
- Address CG issue in Microsoft.IO.Redist by @DaveTryon (#757)
- build(deps): bump Serilog.Sinks.Async from 2.0.0 to 2.1.0 by @dependabot[bot] (#777)
- Scrub dotnet 6 references by @DaveTryon (#775)
- Expand osx coverage in PR builds by @DaveTryon (#774)
- build(deps): bump MSTest.TestFramework from 3.6.1 to 3.6.2 by @dependabot[bot] (#772)
- build(deps): bump MSTest.TestAdapter from 3.6.1 to 3.6.2 by @dependabot[bot] (#771)
- build(deps): bump Microsoft.Build from 17.10.4 to 17.11.4 by @dependabot[bot] (#764)
- typo: ThrowArguement -> ThrowArgument; fix SPDX URL anchor by @bact (#769)
- Add language tag to code blocks and correct indented code block by @bact (#770)
- Update EsrpCodeSigning task to version 5 by @jlperkins (#761)
- Update SPDX spec links to current by @bact (#765)
- Fix several typos in Markdown files and in a comment by @bact (#766)
- build(deps): bump System.Reactive from 5.0.0 to 6.0.1 by @dependabot[bot] (#588)
- build(deps): bump dotnet/runtime-deps from 6.0.8-bullseye-slim-amd64 to 7.0.20-bullseye-slim-amd64 by @dependabot[bot] (#589)
- build(deps): bump actions/setup-dotnet from 4.0.1 to 4.1.0 by @dependabot[bot] (#763)
- build(deps): bump System.Threading.Tasks.Dataflow from 4.11.1 to 8.0.1 by @dependabot[bot] (#611)
- build(deps): bump Serilog.Extensions.Hosting from 7.0.0 to 8.0.0 by @dependabot[bot] (#657)
- build(deps): bump Scrutor from 4.2.2 to 5.0.1 by @dependabot[bot] (#727)
- build(deps): bump actions/checkout from 4.2.1 to 4.2.2 by @dependabot[bot] (#760)
- build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 by @dependabot[bot] (#759)
- Bump Microsoft.Extensions.Caching.Memory for CVE by @DaveTryon (#758)
