Skip to content

Conversation

@mscottford
Copy link
Member

@mscottford mscottford commented Sep 26, 2023

  • Ensures that a new CycloneDX BOM is generated for each manifest that is analyzed (this was technically a bug that was discovered during this implementation)
  • Stores analysis metadata in each CycloneDX BOM that is generated
  • Stores LibYear values as component metadata
  • Store release history as component metadata

Addresses the following issues:

mscottford and others added 17 commits September 24, 2023 00:34
The `IBillOfMaterialsProcessor` will be responsible for actually inserting the CycloneDX "properties" into the BOM file. This commit just focuses on the orchestration of kicking off that work.
* Starts implementation of `IBillOfMaterialsProcessor` that is used by activities
    * Right now it just knows how to store analysis metadata. More to come.
* Adds a new field and a new relationship to `CachedHistoryStopPoint` to facilitate metadata generation

Fixes #541.
@mscottford mscottford marked this pull request as ready for review September 26, 2023 18:27
@mscottford mscottford merged commit 630bfd8 into main Sep 26, 2023
@mscottford mscottford deleted the bom-metadata branch September 26, 2023 18:28
@github-actions github-actions bot locked and limited conversation to collaborators Sep 26, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Store LibYear information in CycloneDX SBOM Store analysis metadata in the CycloneDX SBOM

2 participants