Demo: symfony
October 27, 2025 ยท View on GitHub
ATTENTION: this demo might use known vulnerable dependencies for showcasing purposes.
The output is reproducible, due to the shipped composer-locked versions.
Therefore, the demo requires a special php environment, which is caused by the composer-requirements:
Example results
The following are examples generated by cyclonedx-php-composer:
results/bom.1.1.xmlresults/bom.1.2.xmlresults/bom.1.3.xmlresults/bom.1.4.xmlresults/bom.1.5.xmlresults/bom.1.6.xmlresults/bom.1.7.xmlresults/bom.1.2.jsonresults/bom.1.3.jsonresults/bom.1.4.jsonresults/bom.1.5.jsonresults/bom.1.6.jsonresults/bom.1.7.json
Setup
For the sake of a demo, a relative path to the cyclonedx-php-composer project is used, so the current code is symlinked and taken into action.
To get the setup up and running, run from this demo directory:
composer -d project setup
Usage examples
Run one of these from the demo directory:
-
See cyclonedx-php-composer help page:
composer -d project CycloneDX:make-sbom --help -
Make XML sbom via composer script:
composer -d project create-sbom-results:XML" -
Make JSON sbom via composer script:
composer -d project create-sbom-results:JSON