Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Python CBOM] All python cryptography usages not detected #1047

Open
aryan-rajoria opened this issue May 6, 2024 · 1 comment
Open

[Python CBOM] All python cryptography usages not detected #1047

aryan-rajoria opened this issue May 6, 2024 · 1 comment
Labels

Comments

@aryan-rajoria
Copy link
Collaborator

Command Run get Python CBOM:
node /opt/cdxgen/bin/cdxgen.js -t python --include-crypto -o bom.json .

Output:
image

Expected Output to contain following references:
https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/secure_tempfile.py#L92
https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/admin/securedrop_admin/__init__.py#L808
https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/models.py#L453
https://github.com/freedomofpress/securedrop/blob/3a50273be99c78c78ea169854b2264f1edef3dab/securedrop/two_factor.py#L33

Environment:
OS: 22.04.1-Ubuntu
node: v20.9.0
npm: 10.1.0
cdxgen: form master 246e995

@aryan-rajoria aryan-rajoria changed the title [Python CBOM] All python cryptography usages not be detected [Python CBOM] All python cryptography usages not detected May 6, 2024
@prabhu prabhu added the cbom label May 7, 2024
@sumetpong
Copy link

sumetpong commented May 31, 2024

PyCryptodome
Cryptography, Fernet https://cryptography.io/en/latest/
PyNaCl
PyOpenSSL
Keyczar
M2Crypto
asn1crypto

any synergy with project https://github.com/advanced-security/cbom-action ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants