Can't generate sbom from conanfile.txt

[loschakov]

Hi! I use cdxgen v 9.8.2. When I try to generate a sbom file from conanfile.txt , an empty sbom file is generated. What's I do wrong ?

SCAN_DEBUG_MODE=debug cdxgen -t universal -o dmSources.json
Scanning .
Performing babel-based package usage analysis with source code at .
Found 0 csharp packages at .
Parsing /home/conanfile.txt
BoM includes 0 components and 0 dependencies after dedupe
BOM includes 0 unfiltered components 0 dependencies so far
BoM includes 0 components and 0 dependencies after dedupe
===== WARNINGS =====
[ 'metadata.component is missing.' ]

[prabhu]

@loschakov, if you're only interested in c, pass -t c. We have disabled deep analysis for C/c++ in universal or multi-sbom mode since it was slowing down every pipeline.

https://github.com/CycloneDX/cdxgen/blob/master/index.js#L3007

[loschakov]

@prabhu cdxgen was installed with npm install -g @cyclonedx/cdxgen@9.8.2

I tryed instructions but command ./atom -J-Xmx16g usages -o app.atom --slice-outfile usages.json -l c <path to my rep> output

[WARN ] heap usage after GC: 98% -> will clear some references (if possible)
[WARN ] Failed to parse '/products/dm/Sources/Client.Keylogger.Lib/KeysSnapshot.cpp': Java heap space
[WARN ] Failed to parse '/products/dm/Sources/Client.Keylogger.Lib/Linux/KeyloggerHandler.cpp': Java heap space
[WARN ] Failed to parse '/products/dm/Sources/Client.Lib/Application.cpp': Java heap space

[prabhu]

@loschakov, could you run the cloc command and share the stats about lines of code. We need to allocate more memory or invoke atom from within a sub-folder for large applications. I would also recommend first testing with a smaller project such as openpbs to ensure the environment is working.

[prabhu]

Could you also try passing -l h

./atom -J-Xmx16g usages -o app.atom --slice-outfile usages.json -l h <path to my rep>

This is a lightweight mode where only structural analysis is performed. This will be quicker but might identify only half of the dependencies, so useful for testing purposes.

[loschakov]

@prabhu, result of the cloc command

I use atom on openpbs and slices have been successfully. I tryed ./atom -J-Xmx16g usages -o app.atom --slice-outfile usages.json -l h <path to my rep> on my project, but also have a message [WARN ] heap usage after GC: 96% -> will clear some references (if possible)

[prabhu]

@loschakov, could you join our discord? We need a way to reproduce this and make it initially work with 32GB RAM for starters.

https://discord.gg/tmmtjCEHNV