Generate an SBOM
Open
build/environment
good first issue
help wanted
kind/wish
- Dominant language
- C
- Stars
- 193
- Forks
- 99
- Avg merge
- 1m
- Merged PRs (30d)
- 1
Description
Update the CI to generate a Software Bill of Materials (SBOM) as part of the ASF Celix CI pipeline.
### Notes / Open questions
- We currently do not commit conan.lock to SCM
- Should the lockfile be generated in CI and used for SBOM generation?
- Which SBOM gen technology to use (cdxgen, sbomify, etc)?
It is ok to provide a proposal in a pull request.
Contributions, tooling suggestions, and prior experience are very welcome.
### Expected outcome
- CI job that generates an SBOM
- SBOM published as a CI artifact
- Short documentation describing: how the SBOM is generates
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.