-
-
Notifications
You must be signed in to change notification settings - Fork 53
Description
CycloneDX picks up target-specific dependencies (as it should).
So, I need to run it for each of the multiple targets my project supports. However, by default it puts the output from the different runs in the same file.
Build output goes in a target/<target triple>/release directory, so maybe the SBOM should go there too.
There does not seem to be an option to specify the output directory, which would allow me to direct the output to a target specific directory.
--override-filename does not allow a directory path to be included, which might have been a different solution.
I tried changing to the desired output directory and using --manifest-path to find Cargo.toml, but the output was produced in the same directory as --manifest-path, not in the directory in which the tool was run.
I can specify --target-in-filename to provide disambiguation, so this is not a blocking issue.