Title: WpBom
Author: Vitor Guia
Published: <strong>2021年12月20日</strong>
Last modified: 2025年1月9日

---

搜尋外掛

![](https://ps.w.org/wpbom/assets/banner-772x250.png?rev=2647290)

這個外掛**並未在最新的 3 個 WordPress 主要版本上進行測試**。開發者可能不再對這個
外掛進行維護或提供技術支援，並可能會與更新版本的 WordPress 產生使用上的相容性問題。

![](https://ps.w.org/wpbom/assets/icon-128x128.png?rev=2647055)

# WpBom

 由[Vitor Guia](https://profiles.wordpress.org/vitoranguia/)

[下載](https://downloads.wordpress.org/plugin/wpbom.1.4.0.zip)

 * [詳情](https://zh-hk.wordpress.org/plugins/wpbom/#description)
 * [評價](https://zh-hk.wordpress.org/plugins/wpbom/#reviews)
 *  [安裝](https://zh-hk.wordpress.org/plugins/wpbom/#installation)
 * [開發](https://zh-hk.wordpress.org/plugins/wpbom/#developers)

 [支援](https://wordpress.org/support/plugin/wpbom/)

## 描述

This package is compatible with [WordPress Coding Standards](https://github.com/WordPress/WordPress-Coding-Standards),
[PSR-4](https://www.php-fig.org/psr/psr-4).

WordPress integration with OWASP [CycloneDX](https://cyclonedx.org) and [Dependency Track](https://dependencytrack.org)

Features:

 * Automatic BOM submission to OWASP Dependency Track
 * Manual BOM submission to OWASP Dependency Track
 * Download BOM JSON in OWASP CycloneDX format

## 螢幕截圖

[⌊See option page⌉⌊See option page⌉[

See option page

## 安裝

This project uses [PHP](https://php.net) and [Composer](https://getcomposer.org).

$ cd wp-content/plugins/ $ git clone https://gitlab.com/sepbit/wpbom.git $ cd wpbom
$ composer update –no-dev

## 常見問題

Add [CPE](https://nvd.nist.gov/products/cpe) from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            foreach ( $bom['components'] as $key => $component ) {
                if ( 'woocommerce' === $component['name'] ) {
                    $bom['components'][ $key ]['cpe'] = 'cpe:2.3:a:woocommerce:woocommerce:' . $component['version'] . ':*:*:*:*:wordpress:*:*';
                }
            }
            return $bom;
        }
    );
    ```

We are building a feature to automate this

Remove component from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            foreach ( $bom['components'] as $key => $component ) {
                if ( 'woocommerce' === $component['name'] ) {
                    unset( $bom['components'][ $key ] );
                }
            }
            return $bom;
        }
    );
    ```

Add component from BOM

    ```
    add_filter(
        'wpbom_bom',
        function( $bom ) {
            global $wpdb;
            $db_server_info      = explode( '-', $wpdb->db_server_info() );
            $bom['components'][] = array(
                'type'     => 'application',
                'bom-ref'  => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
                'name'     => strtolower( $db_server_info[2] ),
                'version'  => $db_server_info[1],
                'purl'     => 'pkg:deb/debian/' . strtolower( $db_server_info[2] ) . '@' . $db_server_info[1],
                'licenses' => array(
                    array(
                        'license' => array(
                            'id' => 'GPL-2.0-or-later',
                        ),
                    ),
                ),
            );
            return $bom;
        }
    );
    ```

## 評價

There are no reviews for this plugin.

## 貢獻者及開發者

“WpBom” 是一個開源的軟體。以下的人對這個外掛作出了貢獻。

貢獻者

 *   [ Vitor Guia ](https://profiles.wordpress.org/vitoranguia/)

WpBom 外掛目前已有 1 個本地化語言版本。 感謝[所有譯者](https://translate.wordpress.org/projects/wp-plugins/wpbom/contributors)
為這個外掛做出的貢獻。

[將 WpBom 外掛本地化為台灣繁體中文版。](https://translate.wordpress.org/projects/wp-plugins/wpbom)

### 對開發相關資訊感興趣？

任何人均可[瀏覽程式碼](https://plugins.trac.wordpress.org/browser/wpbom/)、查看 
[SVN 存放庫](https://plugins.svn.wordpress.org/wpbom/)，或透過 [RSS](https://plugins.trac.wordpress.org/log/wpbom/?limit=100&mode=stop_on_copy&format=rss)
訂閱[開發記錄](https://plugins.trac.wordpress.org/log/wpbom/)。

## 修改日誌

#### 1.4.0

 * Add PHP 8.4

#### 1.2.0

 * Add WordPress as component
 * Fix some bugs

#### 1.1.0

 * Add CPE example
 * Fix Copyright
 * Remove purl

#### 1.0.2

 * Add icon

#### 1.0.0

 * First release!

## 其它

 *  Version **1.4.0**
 *  Last updated **1 年之前**
 *  Active installations **60+**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **6.7.5**
 *  PHP version ** 8.2 or higher **
 *  Languages
 * [Dutch (Belgium)](https://nl-be.wordpress.org/plugins/wpbom/) 及 [English (US)](https://wordpress.org/plugins/wpbom/).
 *  [翻譯成你的語言](https://translate.wordpress.org/projects/wp-plugins/wpbom)
 * Tag
 * [CycloneDX](https://zh-hk.wordpress.org/plugins/tags/cyclonedx/)
 *  [進階顯示](https://zh-hk.wordpress.org/plugins/wpbom/advanced/)

## 評分

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/wpbom/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/wpbom/reviews/)

## 貢獻者

 *   [ Vitor Guia ](https://profiles.wordpress.org/vitoranguia/)

## 支援

有話想說？需要協助？

 [檢視支援論壇](https://wordpress.org/support/plugin/wpbom/)

## 捐贈

想要支援這個外掛的發展嗎？

 [ 贊助這個外掛 ](https://liberapay.com/vitoranguia/)