bomify

bomify¶

bomify builds packages from CycloneDX SBOMs

Synopsis¶

bomify is a CLI that consumes a CycloneDX Software Bill of Materials (SBOM) and builds packages from the components it describes.

bomify [flags]

Examples¶

  # Build a package from an SBOM, then publish it
  bomify build sbom.json --tag myapp:latest
  bomify push myapp:latest

  # See what's built locally
  bomify packages

Options¶

      --data-dir string   directory to store bomify data (e.g., built packages). default is $HOME/.bomify or the value of the BOMIFY_DATA_DIR environment variable
      --docs-dir string   directory to write documentation to (if empty, no docs are generated)
  -h, --help              help for bomify
      --verbose           enable verbose (debug) logging

SEE ALSO¶

bomify build - Build the package described by a CycloneDX SBOM
bomify completion - Generate the autocompletion script for the specified shell
bomify distribute - Publish a locally available package to a remote endpoint
bomify distribution - Manage remote-endpoint rules for bomify distribute
bomify load - Load packages from a tarball
bomify login - Log in to an OCI registry, or store credentials for another host
bomify logout - Log out from an OCI registry
bomify package - Manage individual bomify packages
bomify packages - List built packages
bomify plugin - Install and list bomify plugins
bomify pull - Download a bomify package from an OCI registry
bomify push - Publish a bomify package to an OCI registry
bomify rmp - Remove packages by tag (shorthand for "bomify package remove")
bomify save - Save packages to a tarball
bomify sbom - Compose SBOMs from deployment mediums
bomify security - Security scanning commands
bomify sign - Add signatures to a published package
bomify signer - Manage named signers for bomify push and save
bomify tag - Create a new tag pointing at an existing package
bomify trust - Manage signature verification rules for bomify pull and load
bomify version - Print version, commit, and build date information