Skip to content

Feat/multiple cboms#5

Merged
n1ckl0sk0rtge merged 23 commits intomainfrom
feat/multiple-cboms
Mar 10, 2025
Merged

Feat/multiple cboms#5
n1ckl0sk0rtge merged 23 commits intomainfrom
feat/multiple-cboms

Conversation

@san-zrl
Copy link
Copy Markdown
Contributor

@san-zrl san-zrl commented Mar 7, 2025 •
edited
Loading

Implements additional features:

  • Scans python code (Implement python support #1 )
  • Produces multiple CBOMs (Implement package/module based CBOM generation #2):
    • One CBOM per maven/python package named cbom[_<group_id>]_<artifact_id>_<version>.json.
    • One consolidated CBOM over all source code named cbom.json
    • All CBOMs uploaded to github asset space via action variable pattern=cbom*.json
  • Includes giturl, branch, commit hash and subfolder in metadata properties of each CBOM
    -> CBOM files can be loaded into CbomKit, links to source code work correctly

san-zrl added 23 commits February 24, 2025 17:36
@san-zrl
multiple cboms
91aa28b 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
use cbom file pattern
eca4853 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
use cbom file pattern
9d39006 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
use cbom file pattern
de20d13 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
use cbom file pattern
9b2c783 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix: ignore parent packages, inherit metadata from parent
f74b25a 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix: ignore parent packages, inherit metadata from parent
daced95 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix: correcty ignore parent packages
fa2f045 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
added python scanning and generation of consolidated cbom
a744af6 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
debug version
9f81944 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix: finding package medules
04e942f 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
increaed heap size
18b3257 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
increaed heap size
d5809ba 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
generate consolidated cbom only
ed85139 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
generate everything, fixed name of overall cbom
5644319 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
generate everything
50d5b6f 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
heap size to 8g
52becc9 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
added cbomkit metadata properties
2d50679 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix packageFolder and commit metadata
af596e2 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fix giturl metadata
a27b6fa 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
increased heap
9cb043d 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
fixed packageFolder metadata
178670a 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl
property name packageFolder -> subfolder
32b2eb3 
Signed-off-by: san-zrl <san@zurich.ibm.com>
@san-zrl san-zrl added the enhancement New feature or request label Mar 7, 2025
@san-zrl san-zrl requested a review from n1ckl0sk0rtge March 7, 2025 11:20
n1ckl0sk0rtge
n1ckl0sk0rtge approved these changes Mar 10, 2025
View reviewed changes
Copy link
Copy Markdown
Contributor

@n1ckl0sk0rtge n1ckl0sk0rtge left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@n1ckl0sk0rtge n1ckl0sk0rtge merged commit 9ee31c8 into main Mar 10, 2025
@n1ckl0sk0rtge n1ckl0sk0rtge deleted the feat/multiple-cboms branch March 10, 2025 15:36
This was referenced Mar 10, 2025
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@n1ckl0sk0rtge n1ckl0sk0rtge n1ckl0sk0rtge approved these changes

Assignees

No one assigned

Labels

enhancement New feature or request

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@san-zrl @n1ckl0sk0rtge