trivy

Install on ubuntu

curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh

Run and get json file on the ubuntu, replace the ~/codepath with your folder

trivy fs ~/codepath --format cyclonedx --scanners vuln,license --license-full -o sborn.json