dotnet / dotnet/sdk

SBOM generation support for .NET Applications

Open
#46,272 0 comments 6 reactions 0 assignees View on GitHub
Area-NetSDK Area-SBOM
Dominant language
C#
Stars
3.2k
Forks
1.3k
PR merge metrics
PR metrics pending

Description

### Is your feature request related to a problem? Please describe.

.NET Developers should be able to have an integrated, robust SBOM generation capability in the toolchain, so that .NET applications and libraries have correct, updated SBOMs for consumers of the software to use.

### Describe the solution you'd like

This epic tracks the work list to complete integration of Microsoft.SBOM.Targets into the .NET SDK. In the simplest case, as soon as a user sets `true`, the SDK should

* insert an implicit PackageReference to [Microsoft.SBOM.Targets](https://www.nuget.org/packages/Microsoft.Sbom.Targets)
* ensure that the SBOM generation provided by that package is hooked into the `publish` target
* ensure that relevant .NET toolchain information is provided to the SBOM generation to ensure that future analysis has good traceability of the artifacts

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.