paket.lock Test Data

[Saiganesh-SG]

Hi Team,
I was trying to test certain package config file formats with cdxgen and one of em was packet.lock for dotNet projects. I found this packet.lock file in your test/data folder but it didn't show any dependencies in bom file. Can u please help with this? :)

[prabhu]

@Saiganesh-SG paket.lock was added recently by a contributor so we can list the components.

The full list of package managers with support for dependency tree can be found below

https://github.com/CycloneDX/cdxgen/tree/master#dependency-tree

[Saiganesh-SG]

Sure
https://github.com/CycloneDX/cdxgen/blob/master/test/data/paket.lock

• couldn't share as file

[prabhu]

@Saiganesh-SG, how are you testing? Can you find a repo that uses paket.lock and run cdxgen against that folder? cdxgen accepts directory as the input.

[Saiganesh-SG]

@prabhu yea Im testing with different repos that contain many different package manager formats like pom.xml , .csproj etc . but I was testing with this paket.lock from cdxgen repo . It didn't give me any results . others work fine.

[prabhu]

Did you use -t dotnet ?

[Saiganesh-SG]

no! , tried with -t dotnet and it works now , thanks! :) , I'll try with some more repos and will let u know.

[Saiganesh-SG]

btw without giving -t , what will be the default value for type?

[prabhu]

It would try to detect several language and package managers. paket.lock is no niche it doesn't look for that by default.

[Saiganesh-SG]

Thank you :)