Enhancement Request
With the release of OpenText Core Application Security 26.1 we now have support for exporting OSS scan results in CycloneDX or SPDX format - SPDX is new.
This is available with the API endpoint GET /api/v3/open-source-scans/{scanId}/sbom.
We should update the fcli fod oss-scan download command to be able to specify this format, e.g.:
fcli fod oss-scan download 12345 --format SPDX -f test.com
If no --format option is specified we default to (current) CycloneDX format.
Enhancement Request
With the release of OpenText Core Application Security 26.1 we now have support for exporting OSS scan results in CycloneDX or SPDX format - SPDX is new.
This is available with the API endpoint
GET /api/v3/open-source-scans/{scanId}/sbom.We should update the
fcli fod oss-scan downloadcommand to be able to specify this format, e.g.:fcli fod oss-scan download 12345 --format SPDX -f test.comIf no
--formatoption is specified we default to (current) CycloneDX format.