Is it possible to aggregate a bom generated from other tools?

[rcsilva83]

Hi,

All my projects use Java for backend and Angular for frontend. With makeAggregateBom I could only aggregate the BOMs generated by Maven plugin but not the BOM generated by cyclonedx-webpack-plugin. Is it possible?

[hboutemy]

generic SBOM aggregation is out of scope of CycloneDX build plugins, as it would mean we would have to code in every technology: that's why CycloneDX CLI has been done https://github.com/CycloneDX/cyclonedx-cli

but I understand that this backend+frontend aggregation is a typical case where it would be nice to have a simpler solution

do you have a public project to share so we can have a concrete look, please?

[rcsilva83]

I got it. It makes sense you focus on Maven. Unfortunately I don't have any public project to share :/

Nevertheless, I found cdxgen which delegates to cyclonedx-maven-plugin and generates the aggregated BOM with frontend included as I need :)