Installation and setup

csspin must be installed.

For leveraging plugins from within the csspin-tooling plugin-package for csspin, the plugin-package must be added to the list of plugin-packages within a project’s spinfile.yaml.

Example: spinfile.yaml setup to enable the sbomasm plugin

plugin_packages:
    - csspin-python
    - csspin-tooling
plugins:
    - csspin_tooling.sbomasm
python:
    version: "3.11.9"

After the setup is done, the plugin-package can be provisioned by executing the following command within the project’s directory:

spin provision

The plugins and their tasks defined in the plugins section of the spinfile.yaml can now be used:

spin sbom:assemble --help