Skip to content

Commit e3ffb6d

Browse files
committed
fix(handbook): improve syntax
1 parent 8e6d5ef commit e3ffb6d

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

handbook/security.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,8 @@ A SBOM (Software Bill of Materials) is a comprehensive inventory of all software
2525

2626
This inventory provides a detailed list of all dependencies, including version numbers, licenses, and known vulnerabilities. By generating an SBOM, developers can track and manage dependencies more effectively, reducing the risk of security breaches and ensuring compliance with licensing requirements.
2727

28-
SBOM helps to comply with the CRA requirements, such as the one defined in Annex 1:
28+
SBOM helps to comply with the CRA requirements, such as the one defined in Annex 1.
29+
2930
Part 1:
3031

3132
> (a) be made available on the market without known exploitable vulnerabilities;
@@ -49,6 +50,7 @@ We have chosen [Trivy](https://trivy.dev/latest/) as our tool for generating SBO
4950
- **GitHub Dependency Graph format**: This format provides a snapshot of the current dependencies under the Insights tab but does not maintain a historical record.
5051
- **CycloneDX**: This format should be included in the release with a filename ending in `.cdx.json`, providing a detailed and standardized SBOM.
5152
It also creates a historical record of dependencies.
53+
5254
When generating a SBOM of package, make sure to target all the software parts:
5355

5456
- the user interface (UI)

0 commit comments

Comments
 (0)