Generate SBOM for package dependencies of Xcode project?

Development Package Manager
1

Is there a way to repurpose the Software Bill of Materials (SBOM) Generation for Swift Package Manager that shipped with Swift 6.4 in Xcode 27 to generate an SBOM for the package dependencies of an Xcode project?

1 Like
2

Hi Jochen,

What do you mean with "repurpose"? Adding support for Xcode projects?

3

Hi Maarten,

yes, exactly. Or making it work at least. :slight_smile:

4

Clear.

I assume that this would require changes in Xcode itself, so requires effort from Apple. And that this would require a feature request in the Feedback Assistent?

Note: this would be a valuable solution for our organization as well.

5

Possibly. But I was hoping for a way to have the SBOM be generated from Package.resolved instead of Package.swift, that would work for Xcode projects as well.

6

The obvious workaround is to use `xcodebuild -resolvePackageDependencies` to get at the Package.swift files for all package dependencies and generate a SBOM for each of them.