CycloneDX / CycloneDX/gh-python-generate-sbom
:mega: migrate to `cyclonedx-bom >= 4` ???
Offen
breaking change
enhancement
- Vorherrschende Sprache
- JavaScript
- Sterne
- 14
- Forks
- 4
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
current implementation of this GitHub action uses an outdated and unmaintained version of [`cyclonedx-bom` < 4](https://pypi.org/project/cyclonedx-bom/).
should this GitHub action be migrated to [`cyclonedx-bom` >= 4](https://pypi.org/project/cyclonedx-bom/)?
**If you like the idea, give this issue thumbs up, or write a comment.**
Beitragsleitfaden
Rechercherichtung
Start by inspecting the current GitHub Action implementation and comparing its use of cyclonedx-bom with the linked package documentation. Confirm what changes are required for version 4 or later, then verify that the action still generates the expected Python SBOM.
Vom Indexierungsmodell aus dem Issue-Text verfasst.
Bewertung
- Tech-Stack
- github-actions, javascript, python
- Bereich
- ci-cd, devops
- Issue-Typ
- Refactoring
- Schwierigkeit
- 3/5
- Geschätzter Aufwand
- 1-2 Tage
- Aktivitätsstatus
- Veraltet
- Klarheit
- Muss geklärt werden
- Anfängerfreundlichkeit
- 35/100