Rebom by Reliza

Catalog of Software Bills of Materials (SBOMs)

Rebom works with CycloneDX JSON standard.

Public demo is available at https://rebomdemo.relizahub.com .

N.B. (!) Please note, that any boms uploaded to demo are publicly visible (!)

Load SBOM to Rebom

Download Reliza CLI for your platform.

Add reliza-cli to path and run following command to load bom json:

reliza-cli rebom put --rebomuri "https://rebomdemo.relizahub.com" --infile "tests/bom_versioning_1.json"

Flags used:

• --rebomuri - set to the URI where rebom server is deployed
• --infile - set to absolute or relative path of the bom file to be added. To test, you may use samples from the tests directory of this repository.

Note that only CycloneDX BOMs in JSON are supported.

Running Rebom packages

With Docker-compose

Clone this repository and run the following command:

docker-compose up -d

With Kubernetes and Helm

You would need Helm pre-installed.

Option 1. Install from Reliza Registry:

helm upgrade --install --create-namespace rebom -n rebom oci://registry.relizahub.com/library/rebom

Option 2. Install from local clone of this repository:

Clone this repository. Then run:

helm upgrade --install --create-namespace rebom -n rebom helm/rebom

References

This project is mentioned in the following tutorials and external resources:

1. How To Spin Helm Ephemerals with Reliza Hub: Tutorial
2. CycloneDX Tool Center

Developing Rebom

You would need Docker and Node 16+. Visual Studio Code is recommended.

1. Create a docker container for database:

docker run --name rebom-postgres -d -p 5438:5432 -e POSTGRES_PASSWORD=password postgres:14

You can later start/stop database container using docker stop rebom-postgres and docker start rebom-postgres.

2. Run Flyway - you can do it using docker:

docker run --rm -v $PWD/backend/migrations:/flyway/sql flyway/flyway -url=jdbc:postgresql://host.docker.internal:5438/postgres -user=postgres -password=password -defaultSchema=rebom -schemas='rebom' migrate

3. Run backend:

Backend is an Express.js / Apollo GraphQL project.

cd backend
npm install
npm start

Backend will be listening on localhost, port 4000.

4. Run frontend:

Frontend is a Vue 3 project.

cd frontend
npm install
npm run serve

Frontend will be listening on localhost, port 3005.

Navigating to http://localhost:3005 in your browser should open Rebom.

Support

Please ask questions or share comments at DevOps and DataOps Discord - https://devopscommunity.org - for support.