Create SBOMs for all artifacts including RPMs, MSIs, PKGs, etc.
Open
- Dominant language
- Jinja
- Stars
- 168
- Forks
- 77
- Avg merge
- 2d 14h
- Merged PRs (30d)
- 12
Description
There are SBOMs for Eclipse Temurin tarballs. There should also be SBOMs for all other artifacts, including the RPMS, MSIs, and PKGs.
Contributor guide
Research direction
Start by locating how SBOMs are generated for Eclipse Temurin tarballs in this installer repository. Trace the artifact packaging paths for RPMs, MSIs, and PKGs, then determine how each should receive an SBOM; done means all listed artifact types have corresponding SBOMs.
Written by the indexing model from the issue text.
Assessment
- Domain
- release, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100