csspin-tooling

csspin-tooling is maintained by CONTACT Software GmbH and provides utility plugins and tasks to be used with the csspin task runner.

The following plugins are available:

csspin_tooling.sbomasm: Assembles multiple CycloneDX SBOM files into a single enriched top-level SBOM using the sbomasm tool.
csspin_tooling.fetch_vex: Downloads a CycloneDX VEX file for a given package version from Dependency-Track.

Prerequisites

csspin must be installed before using this package:

python -m pip install csspin

Using csspin-tooling

Add the package and the desired plugins to your project’s spinfile.yaml:

spin:
  project_name: my_project

plugin_packages:
  - csspin-python
  - csspin-tooling

plugins:
  - csspin_tooling.sbomasm
  - csspin_tooling.fetch_vex

python:
  version: "3.11.9"

Provision the project to download sbomasm and install all dependencies:

spin provision

Assemble a top-level SBOM from all *.cdx.json files in the project root:

spin sbom --help

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distributions

No source distribution files available for this release.See tutorial on generating distribution archives.

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

csspin_tooling-1.0.0-py3-none-any.whl (14.9 kB view details)

Uploaded Aug 11, 2026 Python 3

File details

Details for the file csspin_tooling-1.0.0-py3-none-any.whl.

File metadata

Download URL: csspin_tooling-1.0.0-py3-none-any.whl
Upload date: Aug 11, 2026
Size: 14.9 kB
Tags: Python 3
Uploaded using Trusted Publishing? No
Uploaded via: twine/7.0.0 CPython/3.11.11

File hashes

Hashes for csspin_tooling-1.0.0-py3-none-any.whl
Algorithm	Hash digest
SHA256	`85986eee27d2742a274e65f7b2ff0880c6771ba55ae6fe4e06d36bcf25e46ea3`
MD5	`70cebdfdb8404231b3de77e10004252f`
BLAKE2b-256	`bf905fad273e9b040636544b4a4ef55aedc2e11bfd75e063b9f7d8e4ac40f3af`