SBOM integration needs to support the 'build' profile
Open
Area-SBOM
- Dominant language
- C#
- Stars
- 3.2k
- Forks
- 1.3k
- PR merge metrics
- PR metrics pending
Description
### Is your feature request related to a problem? Please describe.
In order to provide build-time data about the .NET SDK and build environment, we need to be able to create data according to the [build](https://spdx.dev/learn/areas-of-interest/build/) SPDX profile in the SBOM. The up-to-date spec for this is [here](https://github.com/spdx/spdx-3-model/blob/develop/model/Build/Build.md).
### Describe the solution you'd like
We need the SBOM tool to
* support authoring this data
* provide a way to inject the necessary data via MSBuild at build-time
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.