dotnet / dotnet/sdk

Insert Implicit PackageReference for Microsoft.SBOM.Targets into the .NET SDK

Open
#46,273 0 comments 0 reactions 0 assignees View on GitHub
Area-NetSDK Area-SBOM
Dominant language
C#
Stars
3.2k
Forks
1.3k
PR merge metrics
PR metrics pending

Description

### Is your feature request related to a problem? Please describe.

When a user has `true` then the SDK should insert an up to date implicit PackageReference to the Microsoft.SBOM.Targets package, if the user has not already added one. This means we need to.

* have a tracking property for the version of Microsoft.SBOM.Targets to insert
* have automation to bump our tracking version of the package
* allow the user to override that property
* have a condition that checks the existing PackageReferences for this package
* have notification messages that tell the user the SDK can provide this reference

This work has already begun in https://github.com/dotnet/sdk/pull/43151

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.