Skip to content

Conversation

@jiparis
Copy link
Member

@jiparis jiparis commented Jul 24, 2024

This improves and adds some new policies, including:

  • SBOM is present
  • all components have license
  • no banned licenses
  • no banned packages
  • required packages
  • SBOM freshness (not older than xxxx)

All of them will output an individual message for each violation (for example, the list of packages without licenses)

Closes #1124

jiparis added 3 commits July 23, 2024 18:23
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
@jiparis jiparis requested review from danlishka and migmartri July 24, 2024 07:34
jiparis added 2 commits July 24, 2024 12:34
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
Copy link
Member

@migmartri migmartri left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Awesome

@migmartri
Copy link
Member

@jiparis any reason you are holding the merge? Maybe review from @javirln?

@jiparis
Copy link
Member Author

jiparis commented Jul 29, 2024

@jiparis any reason you are holding the merge? Maybe review from @javirln?

I'll add your suggestions and merge it right away. @javirln feel free to add your suggestions/comments. Thanks!

jiparis added 2 commits July 29, 2024 13:51
Signed-off-by: Jose I. Paris <jiparis@chainloop.dev>
@migmartri migmartri merged commit 5dc73d6 into chainloop-dev:main Jul 29, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Create SBOM policies

2 participants