Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Can this be used to get list of all dependencies? #4

Open
joinemm opened this issue Mar 2, 2023 · 3 comments
Open

Can this be used to get list of all dependencies? #4

joinemm opened this issue Mar 2, 2023 · 3 comments

Comments

@joinemm
Copy link

joinemm commented Mar 2, 2023

I've made a graph and I'm able to query dependencies of specific files, but my end goal really is to create SBOM (software bill of materials) of aosp and for that I would need the full list of all dependencies of the project. Is that possible to query with the structure of bgraph?

@bhardwajAbhi
Copy link

Hii joinemm.. How you executed the script.. Can you please explain the syntax.

@bhardwajAbhi
Copy link

Got it from the documentation.

bgraph generate-single --workdir /tmp/bgraph graphs/ android-10.0.0_r1 'https://android.googlesource.com'

@DarkaMaul
Copy link
Collaborator

Hello,

Thanks for your patience.
The question is interesting. As Soong is used for the whole AOSP system, and most (or even all?) components are contained within the repo, you could probably establish a SBOM from a BGraph.
However, I did not try to create one and you may encounter some difficulties doing it. If you have the opportunity, I would be happy if you could share some feedback.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants