Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Does this work on Visual Basic 6.0 app? #534

Open
Almarine-James opened this issue Mar 28, 2024 · 6 comments
Open

Does this work on Visual Basic 6.0 app? #534

Almarine-James opened this issue Mar 28, 2024 · 6 comments
Labels
needs customer input Awaiting input from user before proceeding

Comments

@Almarine-James
Copy link

My organization is now requiring SBOM's regardless of how ancient the software is. We have a massive legacy ERP system written in VB 6.0 stored in a SourceAnywhere for VSS repository. I'm trying to find an SBOM tool that will work on this code. Will this tool do the trick? If not, does anyone have any other ideas regarding SBOM tools that may work on this code?
@jalkire jalkire added the needs triage Default status upon issue submission label Mar 28, 2024
@jalkire
Copy link

jalkire commented Apr 4, 2024

Hi @Almarine-James, the SBOM tool is able to scan built files generically, regardless of framework. In order to detect packages, the component detection library needs to support your environment--you can find more info about its features here.
@jalkire jalkire added needs customer input Awaiting input from user before proceeding and removed needs triage Default status upon issue submission labels Apr 4, 2024
@birchsr
Copy link

birchsr commented Apr 11, 2024

Hi @Almarine-James I'm in the same boat as you, with a few smaller vb6 based tools that ship in a single package, and we are (too) being forced down this route. I have tried to get this tool working, but it doesn't detect VB6 based ".vbp" based projects/modules (component detector ID's are all 0).
If you get this working, can you give me a shout please! in the meantime I'm wearing google out with searching for alternatives.
@SimonvanAs
Copy link

No luck so far, in the same position as both @birchsr and @Almarine-James. Do get output from the tool (see below), but the VB6 package is not included or mentioned as it is not part of the 'component detection' package. Have you found anything that does creates an VB6 app SBoM?
Also got the tip to check with Checkmarx, haven't come round to test that; one of you did perhaps?

image
@SimonvanAs
Copy link

Created an issue with the 'component-detection' GitHub to ask for the VB6 support
@DaveTryon
Copy link
Contributor

@SimonvanAs, your VB6 request (microsoft/component-detection#1088) has been waiting for your input since May 15th, 2024. Just nudging you here and capturing the link to the open request. Sbom-tool won't be able to support VB6 until it's added to component-detection
@DaveTryon
Copy link
Contributor

@birchsr and @Almarine-James, please feel free to jump in on microsoft/component-detection#1088 to help drive this issue in component-detection.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
needs customer input Awaiting input from user before proceeding
5 participants
@jalkire @SimonvanAs @DaveTryon @Almarine-James @birchsr