विवरण
This package is compatible with WordPress Coding Standards, PSR-4.
WordPress integration with OWASP CycloneDX and Dependency Track
Features:
- Automatic BOM submission to OWASP Dependency Track
- Manual BOM submission to OWASP Dependency Track
- Download BOM JSON in OWASP CycloneDX format
इंस्टॉलेशन
This project uses PHP and Composer.
$ cd wp-content/plugins/ $ git clone https://gitlab.com/sepbit/wpbom.git $ cd wpbom $ composer update –no-dev
सामान्य प्रश्न
Add CPE from BOM
add_filter(
'wpbom_bom',
function( $bom ) {
foreach ( $bom['components'] as $key => $component ) {
if ( 'woocommerce' === $component['name'] ) {
$bom['components'][ $key ]['cpe'] = 'cpe:2.3:a:woocommerce:woocommerce:' . $component['version'] . ':*:*:*:*:wordpress:*:*';
}
}
return $bom;
}
);
We are building a feature to automate this
Remove component from BOM
add_filter(
'wpbom_bom',
function( $bom ) {
foreach ( $bom['components'] as $key => $component ) {
if ( 'woocommerce' === $component['name'] ) {
unset( $bom['components'][ $key ] );
}
}
return $bom;
}
);
Add component from BOM
add_filter(
'wpbom_bom',
function( $bom ) {
global $wpdb;
$db_server_info = explode( '-', $wpdb->db_server_info() );
$bom['components'][] = array(
'type' => 'application',
'bom-ref' => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
'name' => strtolower( $db_server_info[2] ),
'version' => $db_server_info[1],
'purl' => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
'licenses' => array(
array(
'license' => array(
'id' => 'GPL-2.0-or-later',
),
),
),
);
return $bom;
}
);
समीक्षाएं
इस प्लगइन के लिए कोई समीक्षा नहीं है।
सहायक &डेवलपर्स
“WpBom” has been translated into 1 locale. Thank you to the translators for their contributions.
Translate “WpBom” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
बदलाव विवरण
1.4.0
- Add PHP 8.4
1.2.0
- Add WordPress as component
- Fix some bugs
1.1.0
- Add CPE example
- Fix Copyright
- Remove purl
1.0.2
- Add icon
1.0.0
- First release!

