5 - Create language-specific SBOM-generator for Java & Scala
Proposal
After 4 - Create SBOM-generators for languages that u... (#365307 - closed) has been completed, we'll have SBOM generators for all of the supported languages that use lockfiles to generate dependency information. The next step is to create SBOM generators for languages that require building a project before dependency information can be obtained.
The purpose of this issue is to create an SBOM generator for Java & Scala, which supports the following package managers:
- gradle
- maven
- sbt
The SBOM generator for sbt does not need to export dependency graph information, since that will be handled by Add dependency graph information to Gemnasium's... (#366168 - closed).
Edited by Adam Cohen