-
-
Notifications
You must be signed in to change notification settings - Fork 32
adding SecureSBOM to tools.json #69
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
adding SecureSBOM to tools.json #69
Conversation
tools.json
Outdated
| ], | ||
| "functions": [ | ||
| "ANALYSIS", | ||
| "PACKAGE_MANAGER_INTEGRATION", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
package manager integration?
could you elaborate on this feature?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks for reviewing @jkowalleck
SecureSBOM has a standalone GitHub Action: https://github.com/shiftleftcyber/secure-sbom-action. In addition we are also close to releasing a standalone SDK that can easily be integrated into various build systems (ie: Jenkins, Bitbucket...). Since "build system" is mentioned in the description of PACKAGE_MANGER_INTEGRATION, I included it in the array.
"PACKAGE_MANAGER_INTEGRATION": "Tools that integrate with build systems and package managers.",
If I am mistaken I would be happy to remove.
|
this PR has conflicts |
Signed-off-by: Vinny Barton <[email protected]>
Signed-off-by: Ahmad Nassri <[email protected]>
f0c2ab5 to
5074e11
Compare
|
we've changed how the |
| ], | ||
| "functions": [ | ||
| "ANALYSIS", | ||
| "PACKAGE_MANAGER_INTEGRATION", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
remove, as discussed here: #69 (comment)
| "PACKAGE_MANAGER_INTEGRATION", |
No description provided.