CycloneDX 1.5 SBOM Generator for Automation Studio 6 Projects

Share Info & Ideas Code & Libraries
1

Hi everyone,

I’ve been exploring practical ways to improve software transparency for industrial automation projects, especially with growing expectations around compliance and traceability.

As a small engineering contribution, I put together a Python-based SBOM generator for B&R Automation Studio 6 projects.

It scans an AS6 project and produces CycloneDX 1.5 JSON SBOMs per configuration, using project metadata plus installation/runtime library information where available. Referencing all used B&R components.

What it currently does:

  • Reads project information from Logical, Physical, and APJ data
  • Generates one SBOM file per configuration
  • Supports optional export of additional technology and system libraries
  • Marks uncertain entries so they can be reviewed manually

Run on the included example:
python src/automation_sbom_parserV1.py example/Repro6

Important:
After generation, please search for “TO BE CHECKED BY USER” in the SBOM and review/update those entries manually.

I would be very happy to get feedback from others:

  • Does it work well on your AS6 projects?
  • Any missing components or metadata you would expect?
  • Suggestions for AS4 compatibility and parser improvements are very welcome.

Feel free to check it out on br-automation-community/ASW6_Application_SBOM

Also check out CycloneDX 1.5 SBOM from SDM system dump - Share Info & Ideas / Code & Libraries - B&R Community for a different approach.

Best regards
Fabian

Thanks for supporting :+1:
@alexander.hefner @kovarj @werner1m @patricthysell

6 Likes
2

You make my day, thanks for sharing. Happy to be a member of the B&R Community together with all of you :slight_smile:

3

First impression:

  • just download python file ( I have already python installed on my PC)
  • in readme file there are syntax samples
  • select project and run script, in output window you have nice overview as well as path to SBOM report

image
image1212×623 32.8 KB

For me, it worked out of the box without problem. well done.

1 Like