Skip to content

Conversation

@haruna99
Copy link

@haruna99 haruna99 commented Mar 11, 2025

Fixes Issue dotnet/arcade#15562

Description

This PR solves the SBOM generation issue in the runtime repo

@haruna99 haruna99 self-assigned this Mar 11, 2025
Copilot AI review requested due to automatic review settings March 11, 2025 22:51
@ghost ghost added the area-Meta label Mar 11, 2025
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR aims to fix SBOM generation issues for runtime by modifying the pipeline configuration. The key changes include disabling SBOM configuration at the job template level, introducing an explicit variable to disable SBOM, and adding a new step to generate SBOM using an external template.

Comments suppressed due to low confidence (1)

eng/pipelines/official/jobs/prepare-signed-artifacts.yml:14

  • [nitpick] Consider using consistent naming conventions for SBOM-related settings. For instance, align the casing of 'enableSbom' with 'DISABLE_SBOM' by renaming it to 'disableSbom' to improve clarity.
enableSbom: false

@dotnet-policy-service
Copy link
Contributor

Tagging subscribers to this area: @dotnet/area-meta
See info in area-owners.md if you want to be subscribed.

@haruna99 haruna99 requested a review from hoyosjs March 12, 2025 17:33
@haruna99
Copy link
Author

I am closing this PR. I have created a new PR #113463 by forking the runtime repo.

@haruna99 haruna99 closed this Mar 13, 2025
@jkotas jkotas deleted the haruna/SBOM-fix branch March 16, 2025 05:27
@github-actions github-actions bot locked and limited conversation to collaborators Apr 15, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants