csspin-tooling is maintained by CONTACT Software GmbH and provides utility plugins and tasks to be used with the csspin task runner.

The following plugins are available:

csspin_tooling.sbomasm: Assembles multiple CycloneDX SBOM files into a single enriched top-level SBOM using the sbomasm tool.
csspin_tooling.fetch_vex: Downloads a CycloneDX VEX file for a given package version from Dependency-Track.

Prerequisites

csspin must be installed before using this package:

python -m pip install csspin

Using csspin-tooling

Add the package and the desired plugins to your project’s spinfile.yaml:

spin:
  project_name: my_project

plugin_packages:
  - csspin-python
  - csspin-tooling

plugins:
  - csspin_tooling.sbomasm
  - csspin_tooling.fetch_vex

python:
  version: "3.11.9"

Provision the project to download sbomasm and install all dependencies:

spin provision

Assemble a top-level SBOM from all *.cdx.json files in the project root:

spin sbom --help

Metadata

Release files for csspin-tooling 1.1.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for csspin-tooling 1.1.1
File	Interpreter	ABI	Platform	Reset
csspin_tooling-1.1.1-py3-none-any.whl 15.6 kB Oct 15, 2026	Python 3	none	any	Details

Release files / csspin_tooling-1.1.1-py3-none-any.whl

Download URL	csspin_tooling-1.1.1-py3-none-any.whl
Size	15.6 kB
Tags	Python 3
SHA-256 checksum How to use checksums	`597bcedf1d4968f95161614533d47755e0c9f9e2bddcfe59916379a56f45b371`
BLAKE2b-256 checksum How to use checksums	`b5a0558e6786511ce0ced1aae16f01dff7fd0510c7e7d11dbc9389c44300ef8b`
Upload date	Oct 15, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	No
Uploaded via	`twine/7.0.0 CPython/3.11.16`