Enhance SBOM handling with new types, resolvers, and tests#439

Open

ybelMekk wants to merge 19 commits into

mainfrom

feat/sbom-status

Commits on May 19, 2026

chore: add local replace directive for v13s/pkg/api
ybelMekk
committed
feat(vulnerability): add SBOMStatus type, ContainerImageSBOM, dataloader and queries
ybelMekk
committed
feat(graphql): add ContainerImageSBOM type, SBOMStatus enum and deprecate hasSBOM
ybelMekk
committed
feat(graphql): add resolvers for ContainerImageSBOM status and processingStartedAt
ybelMekk
committed
refactor(issue): migrate SBOM check from HasSbom to SbomStatus
ybelMekk
committed
test: update fake and integration test for SbomStatus
ybelMekk
committed
refactor(vulnerability): update fake and queries for repeated Workload in GetVulnerabilitySummaryForImage
ybelMekk
committed
refactor(vulnerability): update to workload_refs=2 and sbom_status=3
ybelMekk
committed
fix: update WorkloadRefs to WorkloadRef after v13s proto rename
ybelMekk
committed
chore: use latest v13s main instead of local replace
ybelMekk
committed
fix(vulnerability): always return non-nil ImageVulnerabilitySummary
ybelMekk
committed
fix(vulnerability): cap batch loader concurrency to 10 goroutines
ybelMekk
committed
fix(vulnerability): derive SbomStatus from summary.HasSbom in fake client
ybelMekk
committed
fix(vulnerability): fall back to UNSPECIFIED for unknown SBOMStatus values
ybelMekk
committed
chore: remove blank line in transform.go (gofumpt)
ybelMekk
committed
vulnerability: derive HasSbom from SbomStatus, remove dead wg.Wait error check
ybelMekk
committed
vulnerability: assert processingStartedAt in integration test
ybelMekk
committed
vulnerability: fall back to PROCESSING for unknown SBOMStatus values
ybelMekk
committed
vulnerability: surface stale image tag, handle NotFound as empty response
ybelMekk
committed