adoptium / adoptium/api.adoptium.net
21.0.6+7 Windows SBOM files missing in the API
- Dominant language
- Kotlin
- Stars
- 44
- Forks
- 36
- Avg merge
- 5h 27m
- Merged PRs (30d)
- 42
Description
**Describe the bug**
SBOM files are available on the release page of [`21.0.6+7`](https://github.com/adoptium/temurin21-binaries/releases/tag/jdk-21.0.6%2B7) but the API `https://api.adoptium.net/v3/assets/feature_releases/21/ga` does not return them for Windows binaries.
**To Reproduce**
List of `image_type=sbom` from the `21.0.6+7` (latest) release.
```
$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.image_type=="sbom")) | length'
10
```
List of `image_type=sbom && os=windows` from the `21.0.6+7` (latest) release.
```
$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.os=="windows")) | map(select(.image_type=="sbom")) | length'
0
```
**Expected behavior**
The API should return the SBOM files for Windows binaries.
**Device (please complete the following information):**
- OS: [Linux]
- Browser [e.g. firefox, curl]
Contributor guide
Research direction
Start with the feature_releases/21/ga API endpoint and reproduce the reported curl queries, comparing Windows binaries with the other SBOM entries in release 21.0.6+7. Trace how the endpoint selects release assets; done means the response includes the Windows SBOM files and the filtered count is no longer zero.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kotlin
- Domain
- api, backend
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Clearly specified
- Newbie friendliness
- 45/100