Esri / Esri/arcgis-gitops

Implement software inventories for deployments

Open
#273 1 comment 0 reactions 1 assignee Claimed by @pbobov View on GitHub
enhancement
Dominant language
HCL
Stars
32
Forks
9
Avg merge
1h 3m
Merged PRs (30d)
2

Description

Creating an inventory can lead to the discovery of systems or applications that are outdated, vulnerable,
unnecessary, or unknown entirely. It also allows administrators and relevant outside groups to know the
overall solution's composition at a glance; routinely updating the inventory is necessary to preserve its
usefulness and discover changes to the platform that result in the problems mentioned above.

Each deployment template should have an inventory file that lists:
- First-party (Esri) software installed on the deployment VMs
- Third-party software installed on the deployment VMs
- Configuration management software installed on GitHub Actions runners

At first, the inventory file should be a text file inventory.md that looks like:

| Component Name | Version | Type | Supplier | License |
|----------------------|---------|-------|----------|----------|
| Windows Server 2025 | 10.0.26100 | Operating System | Microsoft | Azure Edition |
| ArcGIS Server | 12.0 | Application | Esri | Esri Master Agreement |
| Apache Tomcat | 10.1.41 | Application | The Apache Software Foundation | Apache License, Version 2.0 |

Later the inventory can be moved to machine-oriented formats, such as a CycloneDX SBOM.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.