Title: WpBom
Author: Vitor Guia
Published: <strong>2021 年 12 月 20 日</strong>
Last modified: 2025 年 1 月 9 日

---

搜索插件

![](https://ps.w.org/wpbom/assets/banner-772x250.png?rev=2647290)

**该插件尚未通过WordPress的最新3个主要版本进行测试**。 当与较新版本的WordPress一起
使用时，可能不再受到维护或支持，并且可能会存在兼容性问题。

![](https://ps.w.org/wpbom/assets/icon-128x128.png?rev=2647055)

# WpBom

 作者：[Vitor Guia](https://profiles.wordpress.org/vitoranguia/)

[下载](https://downloads.wordpress.org/plugin/wpbom.1.4.0.zip)

 * [详情](https://cn.wordpress.org/plugins/wpbom/#description)
 * [评价](https://cn.wordpress.org/plugins/wpbom/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/wpbom/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/wpbom/#developers)

 [支持](https://wordpress.org/support/plugin/wpbom/)

## 描述

This package is compatible with [WordPress Coding Standards](https://github.com/WordPress/WordPress-Coding-Standards),
[PSR-4](https://www.php-fig.org/psr/psr-4).

WordPress integration with OWASP [CycloneDX](https://cyclonedx.org) and [Dependency Track](https://dependencytrack.org)

Features:

 * Automatic BOM submission to OWASP Dependency Track
 * Manual BOM submission to OWASP Dependency Track
 * Download BOM JSON in OWASP CycloneDX format

## 屏幕截图

[⌊See option page⌉⌊See option page⌉[

See option page

## 安装

This project uses [PHP](https://php.net) and [Composer](https://getcomposer.org).

$ cd wp-content/plugins/ $ git clone https://gitlab.com/sepbit/wpbom.git $ cd wpbom
$ composer update –no-dev

## 常见问题

Add [CPE](https://nvd.nist.gov/products/cpe) from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            foreach ( $bom['components'] as $key => $component ) {
                if ( 'woocommerce' === $component['name'] ) {
                    $bom['components'][ $key ]['cpe'] = 'cpe:2.3:a:woocommerce:woocommerce:' . $component['version'] . ':*:*:*:*:wordpress:*:*';
                }
            }
            return $bom;
        }
    );
    ```

We are building a feature to automate this

Remove component from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            foreach ( $bom['components'] as $key => $component ) {
                if ( 'woocommerce' === $component['name'] ) {
                    unset( $bom['components'][ $key ] );
                }
            }
            return $bom;
        }
    );
    ```

Add component from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            global $wpdb;
            $db_server_info      = explode( '-', $wpdb->db_server_info() );
            $bom['components'][] = array(
                'type'     => 'application',
                'bom-ref'  => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
                'name'     => strtolower( $db_server_info[2] ),
                'version'  => $db_server_info[1],
                'purl'     => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
                'licenses' => array(
                    array(
                        'license' => array(
                            'id' => 'GPL-2.0-or-later',
                        ),
                    ),
                ),
            );
            return $bom;
        }
    );
    ```

## 评价

此插件暂无评价。

## 贡献者及开发者

「WpBom」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ Vitor Guia ](https://profiles.wordpress.org/vitoranguia/)

「WpBom」插件已被翻译至 1 种本地化语言。 感谢[所有译者](https://translate.wordpress.org/projects/wp-plugins/wpbom/contributors)
为本插件所做的贡献。

[帮助将「WpBom」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/wpbom)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/wpbom/)，查看[SVN仓库](https://plugins.svn.wordpress.org/wpbom/)，
或通过[RSS](https://plugins.trac.wordpress.org/log/wpbom/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/wpbom/)。

## 更新日志

#### 1.4.0

 * Add PHP 8.4

#### 1.2.0

 * Add WordPress as component
 * Fix some bugs

#### 1.1.0

 * Add CPE example
 * Fix Copyright
 * Remove purl

#### 1.0.2

 * Add icon

#### 1.0.0

 * First release!

## 额外信息

 *  版本 **1.4.0**
 *  最后更新：**2 年前**
 *  活跃安装数量 **60+**
 *  WordPress 版本 ** 6.0 或更高版本 **
 *  已测试的最高版本为 **6.7.5**
 *  PHP 版本 ** 8.2 或更高版本 **
 *  语言
 * [Dutch (Belgium)](https://nl-be.wordpress.org/plugins/wpbom/) 和 [English (US)](https://wordpress.org/plugins/wpbom/).
 *  [翻译成简体中文](https://translate.wordpress.org/projects/wp-plugins/wpbom)
 * 标签
 * [CycloneDX](https://cn.wordpress.org/plugins/tags/cyclonedx/)
 *  [高级视图](https://cn.wordpress.org/plugins/wpbom/advanced/)

## 评级

尚未提交反馈。

[Your review](https://wordpress.org/support/plugin/wpbom/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/wpbom/reviews/)

## 贡献者

 *   [ Vitor Guia ](https://profiles.wordpress.org/vitoranguia/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/wpbom/)

## 捐助

您愿意支持这个插件的发展吗?

 [ 捐助此插件 ](https://liberapay.com/vitoranguia/)