We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
our release assets contain an assembly. lets publish our own SBOM.
the assembly is generated by esbuild. there is no esbuild plugin to generate an SBOM. see https://github.com/CycloneDX/cyclonedx-esbuild. anyway, we can generate one, in similar to how the LICENSES are gathered. (see https://github.com/CycloneDX/cyclonedx-node-yarn/blob/main/tools/write-3rd-party-licenses.cjs) if an esbuild SBOM generator existed, we would use this one.
esbuild
the sbom must be part of the distribution. the sbom must be part of the releaseassets.
The text was updated successfully, but these errors were encountered:
No branches or pull requests
our release assets contain an assembly.
lets publish our own SBOM.
the assembly is generated by
esbuild.there is no
esbuildplugin to generate an SBOM. see https://github.com/CycloneDX/cyclonedx-esbuild.anyway, we can generate one, in similar to how the LICENSES are gathered. (see https://github.com/CycloneDX/cyclonedx-node-yarn/blob/main/tools/write-3rd-party-licenses.cjs)
if an
esbuildSBOM generator existed, we would use this one.the sbom must be part of the distribution.
the sbom must be part of the releaseassets.
The text was updated successfully, but these errors were encountered: