New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Generate SBOMs for JS components #629

Open

toddbaert opened this issue Nov 1, 2023 · 0 comments

Labels

contribfest good first issue help wanted security

Member

toddbaert commented Nov 1, 2023

We have SBOMs currently for Java and Go contribs. We could use them here as well. I recommend this utility: https://github.com/marketplace/actions/cyclonedx-node-js-generate-sbom (we're using the clyclonedx format elsewhere and it's popular).

Definition of done:

SBOMs generated and attached to release artifact in GH, or otherwise made publicly available (for every release)
runtime dependencies only included
only includes dependencies of module in question (not of repo)

Relates to: open-feature/js-sdk#649

toddbaert added good first issue help wanted security labels

toddbaert mentioned this issue

Generate SBOMs for JS components open-feature/js-sdk#649

Closed

toddbaert added the contribfest label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment