Ctrlk
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Toolset Configuration

Local SBOM generation resolves a language-specific toolchain for each ecosystem a scan touches. The CLI prefers the system-installed toolchain when it meets the minimum version requirements and falls back to a pinned toolset under third_party/linux when the system toolchain doesn't qualify.

Toolset settings are read from third_party/runtimes-config.json and third_party/tools-config.json.

Edit these files only to override a default tool path or version:

cd veecli
cat third_party/runtimes-config.json | jq . | less
cat third_party/tools-config.json | jq . | less

Toolset Requirements

The CLI resolves toolsets independently for each of the following ecosystems, using the system toolchain wherever it qualifies.

  • PyPI and Python

  • npm and Node.js

  • Maven and Gradle

  • Cargo and Rust

  • Ruby

  • Go modules

  • NuGet and .NET

Use Native Python

Native Python resolution requires a system Python interpreter, pipdeptree version 2.3.3 or later, and virtual environment support.

Set up Python on Ubuntu 22.04

Python 3.10

Python 3.9

Use Native npm

Native npm resolution requires npm on the system path.

Set up npm on Ubuntu 22.04
Set up npm on Red Hat Enterprise Linux 8

Use Native Maven

Native Maven resolution requires Java and Maven on the system path.

Set up Maven on Ubuntu 22.04
Set up Maven on Red Hat Enterprise Linux 8

Use Native Gradle

Native Gradle resolution requires Java and Gradle on the system path.

Set up Gradle on Ubuntu 22.04

Use Native Cargo

Native Cargo resolution requires Cargo and cargo-lock, ideally installed to the same location.

Set up Cargo on Ubuntu 22.04

Use Native Ruby

Native Ruby resolution requires Ruby, Bundler, RubyGems, the bundler-graph plugin, and the ruby-graphviz and cyclonedx-ruby gems.

Set up Ruby on Ubuntu 22.04

Use Native Go

Native Go resolution requires a system Go installation and cyclonedx-gomod version 1.3.0 or later.

Set up Go on Ubuntu 22.04

Use Native NuGet

Native NuGet resolution requires dotnet and dotnet-cyclonedx on the system path.

Set up NuGet on Ubuntu 22.04

Last updated