Does Ketryx support C# dependency scanning?

Lee Chickering
Lee Chickering
  • Updated

Ketryx be used for C# dependency management through integration with external scanners. Here's how:

  1. Ketryx can parse SPDX (Software Package Data Exchange) files generated by external vulnerability scanners like Snyk or FOSSA, which do support C# dependency scanning.
  2. These SPDX files can be submitted to Ketryx using the Build API or via the Ketryx Github Action
  3. Ketryx will then process the SPDX files to extract information about software packages, including versions, licenses, and vulnerabilities for both direct and indirect (transitive) dependencies.

This approach allows you to use Ketryx for C# dependencies and SBOM (Software Bill of Materials) management. 

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request

Comments

0 comments

Article is closed for comments.