Skip to content

Adding the generation of SBOM capability to Common Backend Scripts#274

Merged
dennis-behm merged 3 commits into
IBM:mainfrom
M-DLB:feature/addSBOMtoCBSPackaging
Sep 16, 2024
Merged

Adding the generation of SBOM capability to Common Backend Scripts#274
dennis-behm merged 3 commits into
IBM:mainfrom
M-DLB:feature/addSBOMtoCBSPackaging

Conversation

@M-DLB
Copy link
Copy Markdown
Member

@M-DLB M-DLB commented Sep 12, 2024

This PR adds the support to generate SBOM when running the Common Backend Scripts.

Signed-off-by: Mathieu Dalbin <mathieu.dalbin@fr.ibm.com>
Signed-off-by: Mathieu Dalbin <mathieu.dalbin@fr.ibm.com>
@M-DLB M-DLB requested a review from dennis-behm September 12, 2024 16:16
Copy link
Copy Markdown
Member

@dennis-behm dennis-behm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @M-DLB

can you please update the README for the CBS to call out the additional options?

I think we could also make a point that this should be rather centrally controlled via the pipelineBackend.config file instead of exposing the -s option to packageBuildOutputs.sh which may require updates to multiple pipelines. However, having the option exposed is a good thing, because probably not all applications want/need the SBOM.

Signed-off-by: Mathieu Dalbin <mathieu.dalbin@fr.ibm.com>
@M-DLB M-DLB requested a review from dennis-behm September 16, 2024 14:18
Copy link
Copy Markdown
Member

@dennis-behm dennis-behm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you Mathieu for the updates.

@dennis-behm dennis-behm merged commit c3b07ea into IBM:main Sep 16, 2024
@M-DLB M-DLB deleted the feature/addSBOMtoCBSPackaging branch September 16, 2024 14:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants