Collector Plugins

Collectors are core HopprPlugin subclasses used to retrieve artifacts from wherever they are maintained (e.g. a URL, or a specialized repository), and place them in a directory structure.

Collectors will also generate hashes for each component, validating these generated hashes against existing hashes in the user-provided SBOM component as well as any hashes provided by package manager. These generated hashes will also be written to the component in the delivered SBOM. Note that the git, nexus, nuget, and docker collectors do not explicitly collect and validate hashes.

Most Collector plugins are thin wrappers for various package managers, check out the library of current Hoppr core collectors below:

📄️ APT (Debian)

APT Collector Plugin

📄️ Cargo

Cargo Collector Plugin

📄️ Composite

Composite Collector Plugin

📄️ DNF (RHEL /RPM)

DNF Collector Plugin

📄️ Docker

Docker Collector Plugin

📄️ Git (GitHub, GitLab)

Git Collector Plugin

📄️ Go

Go Collector Plugin

📄️ Helm

Helm Collector Plugin

📄️ Maven

Maven Collector Plugin

📄️ Nexus

Nexus Collector Plugin

📄️ NPM

NPM Collector Plugin

📄️ NuGet

NuGet Collector Plugin

📄️ PyPI - Python

PyPI Collector Plugin

📄️ Raw / Binary / URL

Raw / Binary / URL Collector Plugin

📄️ RPM (experimental)

RPM Collector Plugin