This plugin hasn’t been tested with the latest 3 major releases of WordPress. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress.

WpBom

विवरण

This package is compatible with WordPress Coding Standards, PSR-4.

WordPress integration with OWASP CycloneDX and Dependency Track

Features:

  • Automatic BOM submission to OWASP Dependency Track
  • Manual BOM submission to OWASP Dependency Track
  • Download BOM JSON in OWASP CycloneDX format

स्क्रीनशॉट्स

इंस्टॉलेशन

This project uses PHP and Composer.

$ cd wp-content/plugins/ $ git clone https://gitlab.com/sepbit/wpbom.git $ cd wpbom $ composer update –no-dev

सामान्य प्रश्न

Add CPE from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        foreach ( $bom['components'] as $key => $component ) {
            if ( 'woocommerce' === $component['name'] ) {
                $bom['components'][ $key ]['cpe'] = 'cpe:2.3:a:woocommerce:woocommerce:' . $component['version'] . ':*:*:*:*:wordpress:*:*';
            }
        }
        return $bom;
    }
);

We are building a feature to automate this

Remove component from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        foreach ( $bom['components'] as $key => $component ) {
            if ( 'woocommerce' === $component['name'] ) {
                unset( $bom['components'][ $key ] );
            }
        }
        return $bom;
    }
);

Add component from BOM

add_filter(
    'wpbom_bom',
    function( $bom ) {
        global $wpdb;
        $db_server_info      = explode( '-', $wpdb->db_server_info() );
        $bom['components'][] = array(
            'type'     => 'application',
            'bom-ref'  => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
            'name'     => strtolower( $db_server_info[2] ),
            'version'  => $db_server_info[1],
            'purl'     => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
            'licenses' => array(
                array(
                    'license' => array(
                        'id' => 'GPL-2.0-or-later',
                    ),
                ),
            ),
        );
        return $bom;
    }
);

समीक्षाएं

इस प्लगइन के लिए कोई समीक्षा नहीं है।

सहायक &डेवलपर्स

यह खुला स्रोत सॉफ्टवेयर है। अनुगामी लोगो ने इस प्लगइन के लिए योगदान दिया है।

योगदानकर्ता

“WpBom” has been translated into 1 locale. Thank you to the translators for their contributions.

Translate “WpBom” into your language.

Interested in development?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

बदलाव विवरण

1.4.0

  • Add PHP 8.4

1.2.0

  • Add WordPress as component
  • Fix some bugs

1.1.0

  • Add CPE example
  • Fix Copyright
  • Remove purl

1.0.2

  • Add icon

1.0.0

  • First release!