cisagov / cisagov/skeleton-python-library

Upload an SBOM for each release

Open
#178 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Shell
Stars
32
Forks
12
PR merge metrics
No merged PRs in 30d

Description

# 💡 Summary #

We should create an SBOM and upload it as a release asset for each release/pre-release.

## Motivation and context ##

We should promote the use of SBOMs.

## Implementation notes ##

- [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action)
- [sbomify/github-action](https://github.com/sbomify/github-action)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.