import type { InfoTabType } from '../types' interface InfoTabsSectionProps { activeInfoTab: InfoTabType setActiveInfoTab: (tab: InfoTabType) => void showFullDocs: boolean setShowFullDocs: (show: boolean) => void } export function InfoTabsSection({ activeInfoTab, setActiveInfoTab, showFullDocs, setShowFullDocs, }: InfoTabsSectionProps) { return (
Das SBOM-Modul generiert und analysiert die vollstaendige Komponentenliste aller Software-Abhaengigkeiten. Es dient der Compliance, Sicherheit und Supply-Chain-Transparenz.
Syft (Primary), Trivy (Validation)
CycloneDX 1.5, SPDX
5 Jahre (Compliance)
Das SBOM-Modul generiert und analysiert die vollstaendige Komponentenliste aller Software-Abhaengigkeiten. Es dient der Compliance, Sicherheit und Supply-Chain-Transparenz.
{`Source Code
|
v
+---------------------------------------------------------------+
| SBOM Generators |
| +-------------+ +-------------+ +---------------------+ |
| | Syft | | Trivy | | Native Tooling | |
| | (Primary) | | (Validation)| | (npm, go mod, pip) | |
| +------+------+ +------+------+ +----------+----------+ |
+---------+----------------+--------------------+---------------+
| | |
+----------------+--------------------+
|
v
+----------------+
| CycloneDX |
| Format |
+----------------+`}
| Typ | Quelle | Beispiele |
|---|---|---|
| npm packages | package-lock.json | react, next, tailwindcss |
| Go modules | go.sum | gin, gorm, jwt-go |
| Python packages | requirements.txt | fastapi, pydantic, httpx |
| Container Images | Dockerfile | node:20-alpine, postgres:16 |
| OS Packages | apk, apt | openssl, libpq |
| Kategorie | Lizenzen | Status |
|---|---|---|
| Permissive (erlaubt) | MIT, Apache 2.0, BSD, ISC | OK |
| Weak Copyleft | LGPL, MPL | Review |
| Strong Copyleft | GPL, AGPL | Nicht erlaubt |
| Proprietaer | Commercial | Genehmigung |