Ketryx be used for C# dependency management through integration with external scanners. Here's how:
- Ketryx can parse SPDX (Software Package Data Exchange) files generated by external vulnerability scanners like Snyk or FOSSA, which do support C# dependency scanning.
- These SPDX files can be submitted to Ketryx using the Build API or via the Ketryx Github Action.
- Ketryx will then process the SPDX files to extract information about software packages, including versions, licenses, and vulnerabilities for both direct and indirect (transitive) dependencies.
This approach allows you to use Ketryx for C# dependencies and SBOM (Software Bill of Materials) management.
Comments
0 comments
Article is closed for comments.