Order SBOM `packages` to have "CPython" be first as the primary package
Open
@sethmlarson is already working on this.
Since May 12, 2024.
triaged
type-bug
- Dominant language
- Python
- Stars
- 77.2k
- Forks
- 35.9k
- PR merge metrics
- PR metrics pending
Description
Bug report
Bug description:
The SPDX SBOM shown does not meet NTIA minimum requirements, there is no creation info.
NTIA Minimum Info Requirements:
https://www.ntia.gov/sites/default/files/publications/sbom_minimum_elements_report_0.pdf
Also, this sbom does not validate using the SPDX online validator:
https://tools.spdx.org/app/validate/
Please update the SBOM to meet the NTIA minimum elements and confirm that it is valid using the oinline validator tool so that it can be processed by existing tools.
CPython versions tested on:
CPython main branch
Operating systems tested on:
Windows
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.