adoptium / adoptium/api.adoptium.net

21.0.6+7 Windows SBOM files missing in the API

Open
#1,383 3 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Kotlin
Stars
44
Forks
36
Avg merge
5h 27m
Merged PRs (30d)
42

Description

**Describe the bug**
SBOM files are available on the release page of [`21.0.6+7`](https://github.com/adoptium/temurin21-binaries/releases/tag/jdk-21.0.6%2B7) but the API `https://api.adoptium.net/v3/assets/feature_releases/21/ga` does not return them for Windows binaries.

**To Reproduce**
List of `image_type=sbom` from the `21.0.6+7` (latest) release.
```
$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.image_type=="sbom")) | length'
10
```
List of `image_type=sbom && os=windows` from the `21.0.6+7` (latest) release.
```
$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.os=="windows")) | map(select(.image_type=="sbom")) | length'
0
```

**Expected behavior**
The API should return the SBOM files for Windows binaries.

**Device (please complete the following information):**
- OS: [Linux]
- Browser [e.g. firefox, curl]

Contributor guide

Open the contributing guide

Research direction

Start with the feature_releases/21/ga API endpoint and reproduce the reported curl queries, comparing Windows binaries with the other SBOM entries in release 21.0.6+7. Trace how the endpoint selects release assets; done means the response includes the Windows SBOM files and the filtered count is no longer zero.

Written by the indexing model from the issue text.

Assessment

Tech stack
kotlin
Domain
api, backend
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.