Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Publish SBOM for Flux and the GitOps Toolkit components #2302

Closed
8 tasks done
Tracked by #2308
stefanprodan opened this issue Jan 18, 2022 · 0 comments
Closed
8 tasks done
Tracked by #2308

Publish SBOM for Flux and the GitOps Toolkit components #2302

stefanprodan opened this issue Jan 18, 2022 · 0 comments
Assignees
@stefanprodan
Labels
area/ci CI related issues and pull requests enhancement New feature or request

Comments

@stefanprodan
Copy link
Member

stefanprodan commented Jan 18, 2022 •
edited
Loading

We should generate and publish a Software Bill of Materials (SBOM) as a release artifact for all Flux projects. To generate a SBOM for Flux Go modules and their dependencies, we can use Syft and GoReleaser. The published SBOM should be in SPDX format.

Projects:

  • flux2
  • source-controller
  • kustomize-controller
  • helm-controller
  • notification-controller
  • image-reflector-controller
  • image-automation-controller
  • source-watcher
@stefanprodan stefanprodan added the enhancement New feature or request label Jan 18, 2022
@stefanprodan stefanprodan self-assigned this Jan 18, 2022
This was referenced Jan 18, 2022
Merged
Merged
@stefanprodan stefanprodan added the area/ci CI related issues and pull requests label Jan 18, 2022
This was referenced Jan 19, 2022
Closed
Merged
Merged
Merged
Merged
Merged
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@stefanprodan stefanprodan

Labels
area/ci CI related issues and pull requests enhancement New feature or request
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@stefanprodan