AbsaOSS / AbsaOSS/atum-service

[SEC:HIGH][FP=cad917c9] Ensure pipeline steps produce an SBOM

Open
#470 1 comment 0 reactions 0 assignees View on GitHub
scope:security sec:false-positive type:tech-debt
Dominant language
Scala
Stars
6
Forks
1
Avg merge
2d 7h
Merged PRs (30d)
4

Description

## General Information

- **Severity:** high
- **Title:** Ensure pipeline steps produce an SBOM
- **Category:** pipelineMisconfigurations
- **Rule:** AVD-PIPELINE-0022
- **Alert hash:** cad917c9ed4066160ba5f86fcdb379cc
- **First seen:** 2026-06-23

## Description

Consider adding SBOM generation tool to build job 'JaCoCo Report'

## Location

- **Repository:** AbsaOSS/atum-service
- **File:** [jacoco_report.yml](https://github.com/AbsaOSS/atum-service/blob/e225c86d04068e8d439a8b42866faa0b55323898/.github/workflows/jacoco_report.yml#L73)
- **Start Line:** 73
- **End Line:** 73

## Dependency Details

- **Reachable:** False

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.