cdxgen (latest)

Published 2025-07-30 14:57:01 +03:00 by administrator

Pull the image from the command line:

docker pull git.anikiforov.dev/mobile-apps/cdxgen:latest

Digest

sha256:37b176e56d4a4fa94cbee0f58eb736ddd89aac33176e1a9fb18e51e5052b5b09

For more information on the Container registry, see the documentation.

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server

ADD almalinux-10-minimal-amd64.tar.xz / # buildkit

CMD ["/bin/bash"]

LABEL maintainer=cyclonedx org.opencontainers.image.authors=Prabhu Subramanian <prabhu@appthreat.com> org.opencontainers.image.source=https://github.com/cyclonedx/cdxgen org.opencontainers.image.url=https://github.com/cyclonedx/cdxgen org.opencontainers.image.version=11.4.x org.opencontainers.image.vendor=cyclonedx org.opencontainers.image.licenses=Apache-2.0 org.opencontainers.image.title=cdxgen org.opencontainers.image.description=Base Ruby builder. Do not use directly.

ARG RUBY_VERSION=3.4.4

ENV RUBY_VERSION=3.4.4 RBENV_ROOT=/opt/.rbenv MAKEFLAGS=-j$(nproc --ignore=2) PATH=/opt/bin:/opt/vendor/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin/:/root/.local/bin:/root/.rbenv/bin:/root/.rbenv/versions/3.4.4/bin

RUN |1 RUBY_VERSION=3.4.4 /bin/sh -c microdnf install -y gcc gcc-c++ make autoconf automake bison libtool wget git-core bash glibc-common glibc-all-langpacks openssl-devel readline-devel zlib-devel ncurses-devel libffi-devel pcre2-devel && microdnf install -y epel-release && microdnf install --enablerepo=crb -y libyaml-devel && git clone https://github.com/rbenv/rbenv.git --depth=1 /opt/.rbenv && echo 'export PATH="/opt/.rbenv/bin:$PATH"' >> ~/.bashrc && echo 'eval "$(/opt/.rbenv/bin/rbenv init - bash)"' >> ~/.bashrc && echo 'export RBENV_ROOT=/opt/.rbenv' >> ~/.bashrc && echo 'export NVM_DIR=/opt/.nvm' >> ~/.bashrc && source ~/.bashrc && mkdir -p "/opt/.rbenv/plugins" && git clone https://github.com/rbenv/ruby-build.git --depth=1 "/opt/.rbenv/plugins/ruby-build" && rbenv install ${RUBY_VERSION} -- --disable-install-doc && rbenv global ${RUBY_VERSION} && rm -rf /opt/.rbenv/cache && ruby --version && microdnf clean all # buildkit

ARG SWIFT_SIGNING_KEY=52BB7E3DE28A71BE22EC05FFEF80A866B47A981F

ARG SWIFT_PLATFORM=ubi9

ARG SWIFT_BRANCH=swift-6.1.2-release

ARG SWIFT_VERSION=swift-6.1.2-RELEASE

ARG SWIFT_WEBROOT=https://download.swift.org

ARG JAVA_VERSION=24.0.1-tem

ARG SBT_VERSION=1.11.2

ARG MAVEN_VERSION=3.9.10

ARG GRADLE_VERSION=8.14.2

ARG GO_VERSION=1.24.4

ARG NODE_VERSION=24.3.0

ARG RUBY_VERSION=3.4.4

ARG JAVA_TOOL_OPTIONS=-Dfile.encoding=UTF-8

ARG SCALA_VERSION=3.7.1

ENV GOPATH=/opt/app-root/go JAVA_VERSION=24.0.1-tem SBT_VERSION=1.11.2 MAVEN_VERSION=3.9.10 GRADLE_VERSION=8.14.2 GRADLE_OPTS=-Dorg.gradle.daemon=false JAVA_HOME=/opt/.sdkman/candidates/java/24.0.1-tem MAVEN_HOME=/opt/.sdkman/candidates/maven/3.9.10 GRADLE_HOME=/opt/.sdkman/candidates/gradle/8.14.2 SBT_HOME=/opt/.sdkman/candidates/sbt/1.11.2 SCALA_VERSION=3.7.1 SCALA_HOME=/opt/.sdkman/candidates/scala/3.7.1 PYTHON_CMD=/usr/bin/python3 RUBY_VERSION=3.4.4 PYTHONUNBUFFERED=1 PYTHONIOENCODING=utf-8 COMPOSER_ALLOW_SUPERUSER=1 JAVA_TOOL_OPTIONS=-Dfile.encoding=UTF-8 SWIFT_SIGNING_KEY=52BB7E3DE28A71BE22EC05FFEF80A866B47A981F SWIFT_PLATFORM=ubi9 SWIFT_BRANCH=swift-6.1.2-release SWIFT_VERSION=swift-6.1.2-RELEASE SWIFT_WEBROOT=https://download.swift.org LC_ALL=en_US.UTF-8 LANG=en_US.UTF-8 LANGUAGE=en_US.UTF-8 NVM_DIR=/opt/.nvm TMPDIR=/tmp DOTNET_CLI_TELEMETRY_OPTOUT=1 NODE_COMPILE_CACHE=/opt/cdxgen-node-cache PYTHONPATH=/opt/pypi CDXGEN_IN_CONTAINER=true CDXGEN_TEMP_DIR=/tmp/cdxgen-temp SDKMAN_DIR=/opt/.sdkman SDKMAN_CANDIDATES_DIR=/opt/.sdkman/candidates RBENV_ROOT=/opt/.rbenv

ENV PATH=/opt/bin:/opt/vendor/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin/:/root/.local/bin:/root/.rbenv/bin:/root/.rbenv/versions/3.4.4/bin:/opt/bin:/opt/.nvm/versions/node/v24.3.0/bin:/opt/.sdkman/candidates/java/24.0.1-tem/bin:/opt/.sdkman/candidates/maven/3.9.10/bin:/opt/.sdkman/candidates/gradle/8.14.2/bin:/opt/.sdkman/candidates/scala/3.7.1/bin:/opt/.sdkman/candidates/sbt/1.11.2/bin:/opt/app-root/go/bin:/usr/local/go/bin:/usr/local/bin/:/opt/.local/bin:/opt/pypi/bin:/opt/.rbenv/bin:/opt/.rbenv/versions/3.4.4/bin

RUN |14 SWIFT_SIGNING_KEY=52BB7E3DE28A71BE22EC05FFEF80A866B47A981F SWIFT_PLATFORM=ubi9 SWIFT_BRANCH=swift-6.1.2-release SWIFT_VERSION=swift-6.1.2-RELEASE SWIFT_WEBROOT=https://download.swift.org JAVA_VERSION=24.0.1-tem SBT_VERSION=1.11.2 MAVEN_VERSION=3.9.10 GRADLE_VERSION=8.14.2 GO_VERSION=1.24.4 NODE_VERSION=24.3.0 RUBY_VERSION=3.4.4 JAVA_TOOL_OPTIONS=-Dfile.encoding=UTF-8 SCALA_VERSION=3.7.1 /bin/sh -c set -e; ARCH_NAME="$(rpm --eval '%{_arch}')"; url=; case "${ARCH_NAME##*-}" in 'x86_64') OS_ARCH_SUFFIX=''; GOBIN_VERSION='amd64'; ;; 'aarch64') OS_ARCH_SUFFIX='-aarch64'; GOBIN_VERSION='arm64'; ;; *) echo >&2 "error: unsupported architecture: '$ARCH_NAME'"; exit 1 ;; esac && microdnf install -y php php-curl php-zip php-bcmath php-json php-pear php-mbstring php-devel make gcc git-core python3 python3-devel python3-pip glibc-common glibc-all-langpacks openssl-devel libffi-devel libyaml zlib-devel pcre2 which tar gzip zip unzip bzip2 sudo ncurses ncurses-devel sqlite-devel gnupg2 dotnet-sdk-9.0 rust cargo && ruby --version && which ruby && /usr/bin/python3 --version && /usr/bin/python3 -m pip install --no-cache-dir --upgrade setuptools==77.0.3 wheel pip virtualenv && /usr/bin/python3 -m pip install --no-cache-dir --upgrade pipenv poetry blint atom-tools uv --target /opt/pypi && ${PYTHONPATH}/bin/poetry --version && ${PYTHONPATH}/bin/pipenv --version && ${PYTHONPATH}/bin/blint --help && mkdir -p /opt/bin /opt/.nvm /tmp/cdxgen-temp && cargo --version && rustc --version && curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash && source ${NVM_DIR}/nvm.sh && nvm install ${NODE_VERSION} && node --version && curl -s "https://get.sdkman.io" | bash && echo -e "sdkman_auto_answer=true\nsdkman_selfupdate_feature=false\nsdkman_auto_env=true\nsdkman_curl_connect_timeout=20\nsdkman_curl_max_time=0" >> /opt/.sdkman/etc/config && source "/opt/.sdkman/bin/sdkman-init.sh" && sdk install java $JAVA_VERSION /opt/.sdkman/candidates/java && sdk install maven $MAVEN_VERSION /opt/.sdkman/candidates/maven && sdk install gradle $GRADLE_VERSION /opt/.sdkman/candidates/gradle && sdk install scala $SCALA_VERSION /opt/.sdkman/candidates/scala && sdk install sbt $SBT_VERSION /opt/.sdkman/candidates/sbt && SWIFT_WEBDIR="$SWIFT_WEBROOT/$SWIFT_BRANCH/$(echo $SWIFT_PLATFORM | tr -d .)$OS_ARCH_SUFFIX" && SWIFT_BIN_URL="$SWIFT_WEBDIR/$SWIFT_VERSION/$SWIFT_VERSION-$SWIFT_PLATFORM$OS_ARCH_SUFFIX.tar.gz" && SWIFT_SIG_URL="$SWIFT_BIN_URL.sig" && export GNUPGHOME="$(mktemp -d)" && curl -fsSL "$SWIFT_BIN_URL" -o swift.tar.gz "$SWIFT_SIG_URL" -o swift.tar.gz.sig && gpg --batch --quiet --keyserver keyserver.ubuntu.com --recv-keys "$SWIFT_SIGNING_KEY" && gpg --batch --verify swift.tar.gz.sig swift.tar.gz && tar -xzf swift.tar.gz --directory / --strip-components=1 && chmod -R o+r /usr/lib/swift && chmod +x /usr/bin/swift && rm -rf "$GNUPGHOME" swift.tar.gz.sig swift.tar.gz && swift --version && curl -LO "https://dl.google.com/go/go${GO_VERSION}.linux-${GOBIN_VERSION}.tar.gz" && tar -C /usr/local -xzf go${GO_VERSION}.linux-${GOBIN_VERSION}.tar.gz && rm go${GO_VERSION}.linux-${GOBIN_VERSION}.tar.gz && go telemetry off && curl -LO "https://raw.githubusercontent.com/technomancy/leiningen/stable/bin/lein" && chmod +x lein && mv lein /usr/local/bin/ && /usr/local/bin/lein && curl -L -O https://github.com/clojure/brew-install/releases/latest/download/linux-install.sh && chmod +x linux-install.sh && ./linux-install.sh && rm linux-install.sh && curl -L --output /usr/local/bin/bazel https://github.com/bazelbuild/bazelisk/releases/latest/download/bazelisk-linux-${GOBIN_VERSION} && chmod +x /usr/local/bin/bazel && useradd -ms /bin/bash cyclonedx && mv /root/.bashrc /home/cyclonedx/.bashrc && chown -R cyclonedx:cyclonedx /home/cyclonedx/.bashrc && npm install --global corepack@latest && npm install -g node-gyp @microsoft/rush --omit=dev && npx node-gyp install && pecl channel-update pecl.php.net && pecl install timezonedb && echo 'extension=timezonedb.so' >> /etc/php.ini && php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');" && php composer-setup.php && mv composer.phar /usr/local/bin/composer && gem install bundler cocoapods && gem --version && bundler --version # buildkit

COPY . /opt/cdxgen # buildkit

USER cyclonedx

WORKDIR /app

ENTRYPOINT ["cdxgen"]

USER root

COPY /usr/share/dependency-check /usr/share/dependency-check/ # buildkit

COPY /usr/local/bin/trivy /usr/local/bin/trivy # buildkit

RUN /bin/sh -c microdnf install -y jq ca-certificates; rm -rf /var/cache/yum /root/.cache/pypoetry /root/.cache/node; microdnf clean all; chown -R cyclonedx:cyclonedx /usr/share/dependency-check /usr/local/bin/trivy # buildkit

ENV PATH=/opt/sonar-scanner/bin:/usr/local/bin:/usr/share/dependency-check/bin:/opt/bin:/opt/vendor/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/bin/:/root/.local/bin:/root/.rbenv/bin:/root/.rbenv/versions/3.4.4/bin:/opt/bin:/opt/.nvm/versions/node/v24.3.0/bin:/opt/.sdkman/candidates/java/24.0.1-tem/bin:/opt/.sdkman/candidates/maven/3.9.10/bin:/opt/.sdkman/candidates/gradle/8.14.2/bin:/opt/.sdkman/candidates/scala/3.7.1/bin:/opt/.sdkman/candidates/sbt/1.11.2/bin:/opt/app-root/go/bin:/usr/local/go/bin:/usr/local/bin/:/opt/.local/bin:/opt/pypi/bin:/opt/.rbenv/bin:/opt/.rbenv/versions/3.4.4/bin

ENV SCANNER_WORKDIR_PATH=/tmp/.scannerwork

ENV LANG=C.UTF-8

ENV LC_ALL=C.UTF-8

USER cyclonedx

Key	Value
maintainer	cyclonedx
org.opencontainers.docker.cmd	docker run --rm -v /tmp:/tmp -p 9090:9090 -v $(pwd):/app:rw -t ghcr.io/cyclonedx/cdxgen -r /app --server
org.opencontainers.image.authors	Prabhu Subramanian <prabhu@appthreat.com>
org.opencontainers.image.created	2025-07-15T18:04:30.619Z
org.opencontainers.image.description	Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server
org.opencontainers.image.licenses	Apache-2.0
org.opencontainers.image.revision	56b0a18fb96b290843cee76a3971b4ed9963d596
org.opencontainers.image.source	https://github.com/CycloneDX/cdxgen
org.opencontainers.image.title	cdxgen
org.opencontainers.image.url	https://github.com/CycloneDX/cdxgen
org.opencontainers.image.vendor	cyclonedx
org.opencontainers.image.version	v11.4.4

Details

Container

2025-07-30 14:57:01 +03:00

OCI / Docker

linux/amd64

Prabhu Subramanian <prabhu@appthreat.com>

Apache-2.0

Project website

Repository website

4.2 GiB

Versions (1) View all

latest

2025-07-30

cdxgen (latest)

Installation

About this package

Image layers

Labels