Expand description
stage-source — emit a git archive source tarball and accompanying SBOMs.
The crate is organised as:
- [
archive] —git archiveinvocation and extra-files staging. - [
sbom] — Cargo.lock parsing plus CycloneDX / SPDX renderers. - [
run] — theSourceStageorchestrator that drives both halves.
Structs§
- Cargo
Package - A parsed Cargo.lock package entry.
- Source
Stage
Functions§
- deterministic_
uuid_ from - Deterministic UUID v4-shaped identifier derived from
seed. - generate_
cyclonedx - Generate a CycloneDX 1.5 SBOM in JSON format.
- generate_
spdx - Generate an SPDX 2.3 SBOM in JSON format.
- parse_
cargo_ lock - Parse
Cargo.lockto extract package entries.