Skip to content

Commit 2c1f07d

Browse files
gagikgagik
committed
chore(ci): create separate SBOM for node-runtime-worker-thread MONGOSH-1856 
1 parent 8b27853 commit 2c1f07d

File tree

10 files changed

+129
-51
lines changed

10 files changed

+129
-51
lines changed

‎.evergreen.yml‎

Lines changed: 44 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -3687,7 +3687,7 @@ functions:
36873687
params:
36883688
aws_key: ${aws_key}
36893689
aws_secret: ${aws_secret}
3690-
local_file: src/dist/.sbom.json
3690+
local_file: src/dist/.sbom/mongosh/sbom.json
36913691
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-sbom.json
36923692
bucket: mciuploads
36933693
permissions: public-read
@@ -3696,11 +3696,29 @@ functions:
36963696
params:
36973697
aws_key: ${aws_key}
36983698
aws_secret: ${aws_secret}
3699-
local_file: src/dist/.purls.txt
3699+
local_file: src/dist/.sbom/mongosh/purls.txt
37003700
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-purls.txt
37013701
bucket: mciuploads
37023702
permissions: public-read
37033703
content_type: text/plain
3704+
- command: s3.put
3705+
params:
3706+
aws_key: ${aws_key}
3707+
aws_secret: ${aws_secret}
3708+
local_file: src/dist/.sbom/node-runtime-worker-thread/sbom.json
3709+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-sbom.json
3710+
bucket: mciuploads
3711+
permissions: public-read
3712+
content_type: application/json
3713+
- command: s3.put
3714+
params:
3715+
aws_key: ${aws_key}
3716+
aws_secret: ${aws_secret}
3717+
local_file: src/dist/.sbom/node-runtime-worker-thread/purls.txt
3718+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-purls.txt
3719+
bucket: mciuploads
3720+
permissions: public-read
3721+
content_type: text/plain
37043722
upload_compiled_artifact:
37053723
- command: shell.exec
37063724
params:
@@ -3727,15 +3745,24 @@ functions:
37273745
permissions: public-read
37283746
content_type: application/x-gzip
37293747
upload_first_party_deps_list:
3730-
- command: s3.put
3748+
- command: s3.put
37313749
params:
37323750
aws_key: ${aws_key}
37333751
aws_secret: ${aws_secret}
3734-
local_file: src/.sbom/first-party-deps.json
3752+
local_file: src/.sbom/mongosh/first-party-deps.json
37353753
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-first-party-deps.json
37363754
bucket: mciuploads
37373755
permissions: public-read
37383756
content_type: application/json
3757+
- command: s3.put
3758+
params:
3759+
aws_key: ${aws_key}
3760+
aws_secret: ${aws_secret}
3761+
local_file: src/.sbom/node-runtime-worker-thread/first-party-deps.json
3762+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-first-party-deps.json
3763+
bucket: mciuploads
3764+
permissions: public-read
3765+
content_type: application/json
37393766
download_compiled_artifact:
37403767
- command: s3.get
37413768
type: setup
@@ -3829,77 +3856,77 @@ functions:
38293856
params:
38303857
aws_key: ${aws_key}
38313858
aws_secret: ${aws_secret}
3832-
local_file: src/.sbom/mongosh-darwin-x64-first-party-deps.json
3859+
local_file: src/.sbom/mongosh/mongosh-darwin-x64-first-party-deps.json
38333860
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-darwin-x64-first-party-deps.json
38343861
bucket: mciuploads
38353862
- command: s3.get
38363863
params:
38373864
aws_key: ${aws_key}
38383865
aws_secret: ${aws_secret}
3839-
local_file: src/.sbom/mongosh-darwin-arm64-first-party-deps.json
3866+
local_file: src/.sbom/mongosh/mongosh-darwin-arm64-first-party-deps.json
38403867
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-darwin-arm64-first-party-deps.json
38413868
bucket: mciuploads
38423869
- command: s3.get
38433870
params:
38443871
aws_key: ${aws_key}
38453872
aws_secret: ${aws_secret}
3846-
local_file: src/.sbom/mongosh-linux-x64-first-party-deps.json
3873+
local_file: src/.sbom/mongosh/mongosh-linux-x64-first-party-deps.json
38473874
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-x64-first-party-deps.json
38483875
bucket: mciuploads
38493876
- command: s3.get
38503877
params:
38513878
aws_key: ${aws_key}
38523879
aws_secret: ${aws_secret}
3853-
local_file: src/.sbom/mongosh-linux-x64-openssl11-first-party-deps.json
3880+
local_file: src/.sbom/mongosh/mongosh-linux-x64-openssl11-first-party-deps.json
38543881
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-x64-openssl11-first-party-deps.json
38553882
bucket: mciuploads
38563883
- command: s3.get
38573884
params:
38583885
aws_key: ${aws_key}
38593886
aws_secret: ${aws_secret}
3860-
local_file: src/.sbom/mongosh-linux-x64-openssl3-first-party-deps.json
3887+
local_file: src/.sbom/mongosh/mongosh-linux-x64-openssl3-first-party-deps.json
38613888
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-x64-openssl3-first-party-deps.json
38623889
bucket: mciuploads
38633890
- command: s3.get
38643891
params:
38653892
aws_key: ${aws_key}
38663893
aws_secret: ${aws_secret}
3867-
local_file: src/.sbom/mongosh-linux-arm64-first-party-deps.json
3894+
local_file: src/.sbom/mongosh/mongosh-linux-arm64-first-party-deps.json
38683895
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-arm64-first-party-deps.json
38693896
bucket: mciuploads
38703897
- command: s3.get
38713898
params:
38723899
aws_key: ${aws_key}
38733900
aws_secret: ${aws_secret}
3874-
local_file: src/.sbom/mongosh-linux-arm64-openssl11-first-party-deps.json
3901+
local_file: src/.sbom/mongosh/mongosh-linux-arm64-openssl11-first-party-deps.json
38753902
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-arm64-openssl11-first-party-deps.json
38763903
bucket: mciuploads
38773904
- command: s3.get
38783905
params:
38793906
aws_key: ${aws_key}
38803907
aws_secret: ${aws_secret}
3881-
local_file: src/.sbom/mongosh-linux-arm64-openssl3-first-party-deps.json
3908+
local_file: src/.sbom/mongosh/mongosh-linux-arm64-openssl3-first-party-deps.json
38823909
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-arm64-openssl3-first-party-deps.json
38833910
bucket: mciuploads
38843911
- command: s3.get
38853912
params:
38863913
aws_key: ${aws_key}
38873914
aws_secret: ${aws_secret}
3888-
local_file: src/.sbom/mongosh-linux-ppc64le-first-party-deps.json
3915+
local_file: src/.sbom/mongosh/mongosh-linux-ppc64le-first-party-deps.json
38893916
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-ppc64le-first-party-deps.json
38903917
bucket: mciuploads
38913918
- command: s3.get
38923919
params:
38933920
aws_key: ${aws_key}
38943921
aws_secret: ${aws_secret}
3895-
local_file: src/.sbom/mongosh-linux-s390x-first-party-deps.json
3922+
local_file: src/.sbom/mongosh/mongosh-linux-s390x-first-party-deps.json
38963923
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-linux-s390x-first-party-deps.json
38973924
bucket: mciuploads
38983925
- command: s3.get
38993926
params:
39003927
aws_key: ${aws_key}
39013928
aws_secret: ${aws_secret}
3902-
local_file: src/.sbom/mongosh-win32-first-party-deps.json
3929+
local_file: src/.sbom/mongosh/mongosh-win32-first-party-deps.json
39033930
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-win32-first-party-deps.json
39043931
bucket: mciuploads
39053932
- command: shell.exec
@@ -3913,7 +3940,7 @@ functions:
39133940
.evergreen/create-static-analysis-report.sh
39143941
env:
39153942
NODE_JS_VERSION: ${node_js_version}
3916-
FIRST_PARTY_DEPENDENCY_FILENAMES: .sbom/mongosh-darwin-x64-first-party-deps.json,.sbom/mongosh-darwin-arm64-first-party-deps.json,.sbom/mongosh-linux-x64-first-party-deps.json,.sbom/mongosh-linux-x64-openssl11-first-party-deps.json,.sbom/mongosh-linux-x64-openssl3-first-party-deps.json,.sbom/mongosh-linux-arm64-first-party-deps.json,.sbom/mongosh-linux-arm64-openssl11-first-party-deps.json,.sbom/mongosh-linux-arm64-openssl3-first-party-deps.json,.sbom/mongosh-linux-ppc64le-first-party-deps.json,.sbom/mongosh-linux-s390x-first-party-deps.json,.sbom/mongosh-win32-first-party-deps.json
3943+
FIRST_PARTY_DEPENDENCY_FILENAMES: .sbom/mongosh/mongosh-darwin-x64-first-party-deps.json,.sbom/mongosh/mongosh-darwin-arm64-first-party-deps.json,.sbom/mongosh/mongosh-linux-x64-first-party-deps.json,.sbom/mongosh/mongosh-linux-x64-openssl11-first-party-deps.json,.sbom/mongosh/mongosh-linux-x64-openssl3-first-party-deps.json,.sbom/mongosh/mongosh-linux-arm64-first-party-deps.json,.sbom/mongosh/mongosh-linux-arm64-openssl11-first-party-deps.json,.sbom/mongosh/mongosh-linux-arm64-openssl3-first-party-deps.json,.sbom/mongosh/mongosh-linux-ppc64le-first-party-deps.json,.sbom/mongosh/mongosh-linux-s390x-first-party-deps.json,.sbom/mongosh/mongosh-win32-first-party-deps.json
39173944
GITHUB_TOKEN: ${github_token}
39183945
GITHUB_PR_NUMBER: ${github_pr_number}
39193946
- command: s3.put
@@ -4208,7 +4235,7 @@ functions:
42084235
bucket: mciuploads
42094236
permissions: private
42104237
visibility: signed
4211-
local_file: src/.sbom/dependencies.json
4238+
local_file: src/.sbom/mongosh/dependencies.json
42124239
remote_file: ${project}/${revision}_${revision_order_id}/dependencies.json
42134240
content_type: application/json
42144241
optional: true

‎.evergreen/compile-artifact.sh‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -96,10 +96,10 @@ if uname -a | grep -q 'Linux.*x86_64'; then
9696
test $(objdump -d dist/mongosh | grep '\bvmovd\b' | wc -l) -lt 1250
9797
fi
9898

99-
npm run write-node-js-dep
100-
npm run create-purls-file
101-
cp .sbom/purls.txt dist/.purls.txt
102-
103-
cat dist/.purls.txt
104-
10599
npm run create-dependency-sbom-lists
100+
101+
ls -lhA .sbom
102+
for dir in .sbom/*/; do
103+
cp ${dir}purls.txt dist/${dir}purls.txt
104+
cat dist/${dir}purls.txt
105+
done

‎.evergreen/download-crypt-shared-and-generate-sbom.sh‎

Lines changed: 16 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -4,11 +4,6 @@ set -x
44

55
npm run evergreen-release download-crypt-shared-library
66

7-
ls -lhA dist
8-
echo "pkg:generic/mongo_crypt_shared@$(cat dist/.mongosh_crypt_*.version)" >> dist/.purls.txt
9-
10-
cat dist/.purls.txt
11-
127
set +x
138
echo "${ARTIFACTORY_PASSWORD}" | docker login artifactory.corp.mongodb.com --username "${ARTIFACTORY_USERNAME}" --password-stdin
149
set -x
@@ -18,8 +13,19 @@ trap_handler() {
1813
}
1914
trap trap_handler ERR EXIT
2015

21-
docker pull artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0
22-
docker run --rm -v ${PWD}:/pwd artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0 update \
23-
--purls /pwd/dist/.purls.txt --sbom-out /pwd/dist/.sbom-lite.json
24-
docker run --env-file /tmp/kondukto_credentials.env --rm -v ${PWD}:/pwd artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0 augment \
25-
--repo mongodb-js/mongosh --branch ${KONDUKTO_BRANCH} --sbom-in /pwd/dist/.sbom-lite.json --sbom-out /pwd/dist/.sbom.json
16+
ls -lhA dist/.sbom
17+
18+
for dir in dist/.sbom/*/; do
19+
purls_file="${dir}purls.txt"
20+
if [ -f "$purls_file" ]; then
21+
echo "pkg:generic/mongo_crypt_shared@$(cat dist/.mongosh_crypt_*.version)" >>"$purls_file"
22+
fi
23+
24+
cat ${purls_file}
25+
26+
docker pull artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0
27+
docker run --rm -v ${PWD}:/pwd artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0 update \
28+
--purls /pwd/${purls_file} --sbom-out /pwd/${dir}sbom-lite.json
29+
docker run --env-file /tmp/kondukto_credentials.env --rm -v ${PWD}:/pwd artifactory.corp.mongodb.com/release-tools-container-registry-public-local/silkbomb:2.0 augment \
30+
--repo mongodb-js/mongosh --branch ${KONDUKTO_BRANCH} --sbom-in /pwd/${dir}sbom-lite.json --sbom-out /pwd/${dir}sbom.json
31+
done

‎.evergreen/evergreen.yml.in‎

Lines changed: 34 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -396,7 +396,7 @@ functions:
396396
params:
397397
aws_key: ${aws_key}
398398
aws_secret: ${aws_secret}
399-
local_file: src/dist/.sbom.json
399+
local_file: src/dist/.sbom/mongosh/sbom.json
400400
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-sbom.json
401401
bucket: mciuploads
402402
permissions: public-read
@@ -405,11 +405,29 @@ functions:
405405
params:
406406
aws_key: ${aws_key}
407407
aws_secret: ${aws_secret}
408-
local_file: src/dist/.purls.txt
408+
local_file: src/dist/.sbom/mongosh/purls.txt
409409
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-purls.txt
410410
bucket: mciuploads
411411
permissions: public-read
412412
content_type: text/plain
413+
- command: s3.put
414+
params:
415+
aws_key: ${aws_key}
416+
aws_secret: ${aws_secret}
417+
local_file: src/dist/.sbom/node-runtime-worker-thread/sbom.json
418+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-sbom.json
419+
bucket: mciuploads
420+
permissions: public-read
421+
content_type: application/json
422+
- command: s3.put
423+
params:
424+
aws_key: ${aws_key}
425+
aws_secret: ${aws_secret}
426+
local_file: src/dist/.sbom/node-runtime-worker-thread/purls.txt
427+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-purls.txt
428+
bucket: mciuploads
429+
permissions: public-read
430+
content_type: text/plain
413431
upload_compiled_artifact:
414432
- command: shell.exec
415433
params:
@@ -436,15 +454,24 @@ functions:
436454
permissions: public-read
437455
content_type: application/x-gzip
438456
upload_first_party_deps_list:
439-
- command: s3.put
457+
- command: s3.put
440458
params:
441459
aws_key: ${aws_key}
442460
aws_secret: ${aws_secret}
443-
local_file: src/.sbom/first-party-deps.json
461+
local_file: src/.sbom/mongosh/first-party-deps.json
444462
remote_file: mongosh/binaries/${revision}/${revision_order_id}/mongosh-${executable_os_id}${extra_upload_tag}-first-party-deps.json
445463
bucket: mciuploads
446464
permissions: public-read
447465
content_type: application/json
466+
- command: s3.put
467+
params:
468+
aws_key: ${aws_key}
469+
aws_secret: ${aws_secret}
470+
local_file: src/.sbom/node-runtime-worker-thread/first-party-deps.json
471+
remote_file: mongosh/binaries/${revision}/${revision_order_id}/node-runtime-worker-thread-${executable_os_id}${extra_upload_tag}-first-party-deps.json
472+
bucket: mciuploads
473+
permissions: public-read
474+
content_type: application/json
448475
download_compiled_artifact:
449476
- command: s3.get
450477
type: setup
@@ -543,7 +570,7 @@ functions:
543570
params:
544571
aws_key: ${aws_key}
545572
aws_secret: ${aws_secret}
546-
local_file: src/.sbom/<% out(filename) %>
573+
local_file: src/.sbom/mongosh/<% out(filename) %>
547574
remote_file: mongosh/binaries/${revision}/${revision_order_id}/<% out(filename) %>
548575
bucket: mciuploads
549576
<% } %>
@@ -558,7 +585,7 @@ functions:
558585
.evergreen/create-static-analysis-report.sh
559586
env:
560587
NODE_JS_VERSION: ${node_js_version}
561-
FIRST_PARTY_DEPENDENCY_FILENAMES: <% out(firstPartyDepsFilenames.map(f => `.sbom/${f}`).join(',')) %>
588+
FIRST_PARTY_DEPENDENCY_FILENAMES: <% out(firstPartyDepsFilenames.map(f => `.sbom/mongosh/${f}`).join(',')) %>
562589
GITHUB_TOKEN: ${github_token}
563590
GITHUB_PR_NUMBER: ${github_pr_number}
564591
- command: s3.put
@@ -853,7 +880,7 @@ functions:
853880
bucket: mciuploads
854881
permissions: private
855882
visibility: signed
856-
local_file: src/.sbom/dependencies.json
883+
local_file: src/.sbom/mongosh/dependencies.json
857884
remote_file: ${project}/${revision}_${revision_order_id}/dependencies.json
858885
content_type: application/json
859886
optional: true

‎config/build.conf.js‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -154,7 +154,7 @@ module.exports = {
154154
packagedFilePath: 'THIRD_PARTY_NOTICES'
155155
},
156156
{
157-
sourceFilePath: path.resolve(path.dirname(EXECUTABLE_PATH), '.sbom.json'),
157+
sourceFilePath: path.resolve(path.dirname(EXECUTABLE_PATH), '.sbom/mongosh/sbom.json'),
158158
packagedFilePath: '.sbom.json'
159159
},
160160
],

‎package.json‎

Lines changed: 5 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -49,22 +49,20 @@
4949
"check-coverage": "nyc check-coverage --lines=90",
5050
"generate-error-overview": "npm run generate-error-overview --workspace @mongosh/errors",
5151
"update-authors": "ts-node -P configs/tsconfig-mongosh/tsconfig.common.json scripts/generate-authors.ts",
52-
"create-dependency-sbom-lists": "npm run webpack-build -w packages/cli-repl && npm run write-node-js-dep && npm run create-purls-file && npm run create-first-party-dependency-lists",
53-
"create-first-party-dependency-lists": "mongodb-sbom-tools fetch-codeql-results --first-party-deps-list-dest=.sbom/first-party-deps.json --dependencies=.sbom/dependencies.json --exclude-repos=mongodb-js/kerberos,mongodb-client-encryption",
54-
"create-purls-file": "node scripts/create-purls.js .sbom/dependencies.json .sbom/node-js-dep.json > .sbom/purls.txt",
52+
"write-node-js-dep": "mkdir -p .sbom && node scripts/write-nodejs-dep > .sbom/node-js-dep.json",
53+
"create-dependency-sbom-lists": "npm run write-node-js-dep && npm run create-dependency-sbom-lists --workspaces --if-present",
5554
"preupdate-third-party-notices": "npm run create-dependency-sbom-lists",
56-
"update-third-party-notices": "mongodb-sbom-tools generate-3rd-party-notices --product='mongosh' --dependencies=.sbom/dependencies.json > THIRD_PARTY_NOTICES.md",
55+
"update-third-party-notices": "mongodb-sbom-tools generate-3rd-party-notices --product='mongosh' --dependencies=.sbom/mongosh/dependencies.json > THIRD_PARTY_NOTICES.md",
5756
"update-node-js-versions": "npx @pkgjs/nv ls v20 > .evergreen/node-20-latest.json",
5857
"update-evergreen-config": "npm run test-evergreen-expansions && node .evergreen/generate-evergreen-yml.js .evergreen/evergreen.yml.in > .evergreen.yml",
5958
"update-cli-usage-text": "node scripts/update-cli-usage-text.js",
6059
"update-security-test-summary": "ts-node scripts/generate-security-test-summary.ts > docs/security-test-summary.md",
6160
"mark-ci-required-optional-dependencies": "ts-node scripts/mark-ci-required-optional-dependencies.ts",
62-
"write-node-js-dep": "node scripts/write-nodejs-dep > .sbom/node-js-dep.json",
6361
"scan-node-js": "mongodb-sbom-tools scan-node-js --version=$NODE_JS_VERSION > .sbom/node-js-vuln.json",
6462
"snyk-test": "node scripts/snyk-test.js",
6563
"pregenerate-vulnerability-report": "npm run create-dependency-sbom-lists && npm run snyk-test && npm run scan-node-js",
66-
"generate-vulnerability-report": "mongodb-sbom-tools generate-vulnerability-report --snyk-reports=.sbom/snyk-test-result.json,.sbom/node-js-vuln.json --dependencies=.sbom/dependencies.json,.sbom/node-js-dep.json --fail-on=high > .sbom/vulnerability-report.md",
67-
"create-vulnerability-tickets": "mongodb-sbom-tools generate-vulnerability-report --snyk-reports=.sbom/snyk-test-result.json,.sbom/node-js-vuln.json --dependencies=.sbom/dependencies.json,.sbom/node-js-dep.json --create-jira-issues",
64+
"generate-vulnerability-report": "mongodb-sbom-tools generate-vulnerability-report --snyk-reports=.sbom/snyk-test-result.json,.sbom/node-js-vuln.json --dependencies=.sbom/mongosh/dependencies.json,.sbom/node-js-dep.json --fail-on=high > .sbom/vulnerability-report.md",
65+
"create-vulnerability-tickets": "mongodb-sbom-tools generate-vulnerability-report --snyk-reports=.sbom/snyk-test-result.json,.sbom/node-js-vuln.json --dependencies=.sbom/mongosh/dependencies.json,.sbom/node-js-dep.json --create-jira-issues",
6866
"create-static-analysis-report": "mongodb-sbom-tools fetch-codeql-results --sarif-dest=.sbom/codeql.sarif.json",
6967
"postcreate-static-analysis-report": "mongodb-sbom-tools sarif-to-markdown --sarif=.sbom/codeql.sarif.json --md=.sbom/codeql.md",
7068
"where": "monorepo-where",

0 commit comments

Comments
 (0)