dotnet / dotnet/sdk

SDK should emit some build artifact around it's own version

Open
#51,404 5 comments 0 reactions 1 assignee Claimed by @baronfel View on GitHub
Area-NetSDK untriaged
Dominant language
C#
Stars
3.2k
Forks
1.3k
PR merge metrics
PR metrics pending

Description

@dsplaisted / @baronfel we discussed this back in the spring, but I couldn't find an issue.

Today in https://github.com/microsoft/component-detection we try to deduce the .NET SDK versions used to build an application based on a combination of source (global.json), intermediate artifact (project.assets.json), and environment (calling `dotnet --version`).

It would be better if there was some explicit build artifact that listed out components involved in the build.

It's not SBOM, since that needs to get the information from somewhere, this would be the thing feeding into SBOM generation.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.