dotnet / dotnet/sdk

Provide sbom-tool tests with a base set of scenarios

Open
#43,582 0 comments 0 reactions 0 assignees View on GitHub
Area-NetSDK untriaged
Dominant language
C#
Stars
3.2k
Forks
1.3k
PR merge metrics
PR metrics pending

Description

### Is your feature request related to a problem? Please describe.
This is related to the sbom-tool integration work

### Describe the solution you'd like
Here's a base set of test scenarios for sbom-tool integration:

1. SBOM generation for simple project (dotnet new classlib)
2. SBOM generation for a multi-project solution (n * dotnet new classlib)
3. SBOM generation for a simpe project w/ external deps (dotnet new classlib + any top nuget pkg)
4. SBOM generation for simple project w/ external deps w/ transitive deps (dotnet new classlib + any top nuget pkg w/ deeper transitive graph)
5. Error cases when .csproj, packages.config, components, etc are unable to be found
6. SBOM generation for published artifacts (dotnet new classlib + dotnet publish)
7. SBOM generation format validation (validate for spdx json file output)
8. SBOM generation CLI arguments testing (output and format later on)

Related to #43151

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.