Struct CycloneDxSbom 

pub struct CycloneDxSbom {
    pub bom_format: String,
    pub spec_version: String,
    pub serial_number: String,
    pub version: u32,
    pub metadata: SbomMetadata,
    pub components: Vec<Component>,
    pub dependencies: Vec<Dependency>,
}

A complete CycloneDX 1.5 SBOM document.

Field names use #[serde(rename_all = "camelCase")] to match the CycloneDX JSON schema (bomFormat, specVersion, serialNumber, …).

Fields

bom_format: String

Always the literal string "CycloneDX".

spec_version: String

CycloneDX spec version — "1.5".

serial_number: String

urn:uuid:... serial number, derived from the output ELF digest.

version: u32

Document revision; 1 for a freshly emitted SBOM.

metadata: SbomMetadata

Build metadata: timestamp + the synth compiler tool entry.

components: Vec<Component>

Components: the input WASM, the output ELF, and one per WASM import.

dependencies: Vec<Dependency>

Dependency graph linking the output ELF to its inputs.

Implementations

impl CycloneDxSbom

pub fn new(inputs: &SbomInputs<'_>, timestamp: String) -> Self

Build a CycloneDX 1.5 SBOM describing one synth compilation.

timestamp is the RFC-3339 UTC string for metadata.timestamp; the caller supplies it so tests can pin a fixed value and production code can pass now_rfc3339.

pub fn with_build_environment(self, vars: &[(String, String)]) -> Self

Serialise to pretty-printed CycloneDX 1.5 JSON. #1293: record the byte-changing build environment. vars are (NAME, value) pairs; only SYNTH_* names are kept, sorted, so the property order never depends on the order the OS returned them in.

pub fn to_json(&self) -> String

pub fn sidecar_path(elf_path: &Path) -> PathBuf

Compute the SBOM path next to an output ELF: replaces the file extension with .cdx.json (the conventional CycloneDX-JSON suffix). Examples:

• foo.elf -> foo.cdx.json
• out -> out.cdx.json

Trait Implementations

impl Clone for CycloneDxSbom

fn clone(&self) -> Self

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CycloneDxSbom

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Serialize for CycloneDxSbom

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.