AbsaOSS / AbsaOSS/atum-service
[SEC:HIGH][FP=11cbb2a7] Ensure pipeline steps produce an SBOM
未关闭
scope:security
type:tech-debt
- 主要语言
- Scala
- 星标
- 6
- 派生
- 1
- 平均合并
- 2 天 7 小时
- 30 天内合并 PR
- 4
描述
## General Information
- **Severity:** high
- **Title:** Ensure pipeline steps produce an SBOM
- **Category:** pipelineMisconfigurations
- **Rule:** AVD-PIPELINE-0022
- **Alert hash:** 11cbb2a7352ba44a4f444fb1f649a5dc
- **First seen:** 2026-05-22
## Description
Consider adding SBOM generation tool to build job 'Test Agent, Reader and Model'
## Location
- **Repository:** AbsaOSS/atum-service
- **File:** [build.yml](https://github.com/AbsaOSS/atum-service/blob/e225c86d04068e8d439a8b42866faa0b55323898/.github/workflows/build.yml#L26)
- **Start Line:** 26
- **End Line:** 26
## Dependency Details
- **Reachable:** False
贡献指南
这个仓库没有索引到贡献指南
评估
这个 Issue 还没有评估数据。