Skip to content

Conversation

prabhu
Copy link
Collaborator

@prabhu prabhu commented Jul 31, 2025

Fixes #2109

Include pattern

cdxgen uses the default set of glob patterns to locate language-specific package manifests and lock files. To customise these patterns, use the argument --include-regex.

Example:

Parse only the pyproject.toml files present in directories ending with google.

--include-regex "**/*google/pyproject.toml"

Parse only the requirements.txt files present in directories ending with nvidia.

--include-regex "**/*nvidia/requirements.txt"

Combine this with --exclude, --exclude-type, and other filters to customise the exact set of manifests and lock files used for the generated BOM.

Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
prabhu added 2 commits July 31, 2025 14:31
Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
@prabhu prabhu merged commit d19ffd2 into master Jul 31, 2025
69 of 70 checks passed
@prabhu prabhu deleted the feature/path-include-regex branch July 31, 2025 15:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
mode:cli cdxgen used as cli Ready for QA
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Explicit Python requirements file handling via parameter
1 participant