cdxgen server mode supports publishing to dependency track?

[priyalviroja]

does cdxgen running in server mode supports --server-url & --api-key to publish the result to dependency track?

will following command work?
cdxgen --server --server-url=http://localhost:8081 --api-key=depTrackApiKeyHere

[prabhu]

@priyalviroja, it doesn't support publishing to dependency-track in server mode yet. Any idea what problem you're facing that requires this feature in server mode?

[prabhu]

Would anyone like to contribute to this feature? I've included the instructions below.

1. Import submitBom at line 9
2. Enhance parseQueryString to retrieve dependency track related arguments - https://github.com/CycloneDX/cdxgen/blob/master/server.js#L72

• serverUrl
• apiKey
• project
• projectName
• projectVersion
• parentUUID

Bonus points for refactoring this method to use a loop instead of multiple if statements.

3. Invoke submitBom at line 118 with bomNSData.bomJson
4. Profit!

[setchy]

💰 #583

[prabhu]

Thank you so much!

[setchy]

Available from v9.8.4