Skip to content

update kusari.yml to add in sbom generation config#196

Merged
pxp928 merged 1 commit intomainfrom
pxp928-112-sbom-ingestion-via-gh-app
Feb 5, 2026
Merged

update kusari.yml to add in sbom generation config#196
pxp928 merged 1 commit intomainfrom
pxp928-112-sbom-ingestion-via-gh-app

Conversation

@pxp928
Copy link
Member

@pxp928 pxp928 commented Feb 5, 2026


## Configuration Options

Add the following options to your `kusari.yaml` file:

```yaml
# Enable SBOM generation on merged PRs (default: false)
sbom_generation_enabled: true

# Optional: Custom component name for the SBOM (default: GitHub repo name "owner/repo")
sbom_component_name: "my-custom-component"

# Optional: Override the SBOM subject name in Kusari Platform
sbom_subject_name_override: "custom-subject-name"

# Optional: Override the SBOM subject version in Kusari Platform
sbom_subject_version_override: "v1.0.0"

Configuration Fields

Field Type Default Description
sbom_generation_enabled bool false Enable SBOM generation when PRs are merged to main/master
sbom_component_name string "" (uses repo name) Custom component name for the SBOM metadata
sbom_subject_name_override string "" Override SBOM subject name when uploading to Kusari Platform
sbom_subject_version_override string "" Override SBOM subject version when uploading to Kusari Platform

@pxp928 pxp928 force-pushed the pxp928-112-sbom-ingestion-via-gh-app branch from ca48fd2 to 31dc96a Compare February 5, 2026 18:24
nchelluri
nchelluri previously approved these changes Feb 5, 2026
Signed-off-by: pxp928 <parth.psu@gmail.com>
@pxp928 pxp928 force-pushed the pxp928-112-sbom-ingestion-via-gh-app branch from 31dc96a to 4f1aab2 Compare February 5, 2026 18:28
@pxp928 pxp928 merged commit 36db2e4 into main Feb 5, 2026
9 checks passed
@pxp928 pxp928 deleted the pxp928-112-sbom-ingestion-via-gh-app branch February 5, 2026 18:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants