Skip to content

Instantly share code, notes, and snippets.

View stevespringett's full-sized avatar

Steve Springett stevespringett

View GitHub Profile
@stevespringett
stevespringett / package.json
Last active July 28, 2020 10:45
A ridiculously bloated non-functional project designed to produce a large number of dependencies from which an SBOM can be generated for testing purposes. Execute `npm install` then `npm run bom`
{
"name": "bloated",
"version": "1.0.0",
"private": true,
"description": "A ridiculously bloated non-functional project designed to produce a large number of dependencies from which an SBOM can be generated for testing purposes",
"main": "index.js",
"scripts": {
"bom": "cyclonedx-bom -o bom.xml"
},
"license": "MIT",
@stevespringett
stevespringett / bom.xml
Last active March 3, 2019 05:44
Example CycloneDX 1.1 BOM (Medium Article)
<?xml version="1.0" encoding="UTF-8"?>
<bom xmlns="http://cyclonedx.org/schema/bom/1.1" version="1" serialNumber="urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79">
<components>
<component type="library">
<group>org.example</group>
<name>mylibrary</name>
<version>1.0.0</version>
<scope>required</scope>
<hashes>
<hash alg="MD5">2342c2eaf1feb9a80195dbaddf2ebaa3</hash>
@stevespringett
stevespringett / docker-compose.yml
Created January 4, 2019 21:00
Dependency-Track sample compose file with PostgreSQL - This doesn't take into account startup/timing to ensure PostgreSQL is ready to accept connections before Dependency-Track startups up.
version: '3'
services:
postgres10:
environment:
- POSTGRES_USER=dtrack
- POSTGRES_PASSWORD=changeme
image: 'postgres:10.5'
volumes:
- './postgres-data:/var/lib/postgresql/data'
dtrack:
### Keybase proof
I hereby claim:
* I am stevespringett on github.
* I am stevespringett (https://keybase.io/stevespringett) on keybase.
* I have a public key whose fingerprint is 37DB EB7A 0451 052C 9397 613E 7910 4296 7544 5798
To claim this, I am signing this object: