-
Epic
-
Resolution: Unresolved
-
Major
-
None
-
None
-
None
-
SBoM
-
False
-
-
False
-
In Progress
-
36% To Do, 64% In Progress, 0% Done
This is the overarching Epic to contain work on:
- producing SPDX SBoMs
- consuming SPDX SBoMs
Some requirements:
- We should be able to consume our own SBoMs
- We should be able to consume other Red Hat produced SPDX SBoMs (or have clear explanations for the missing information)
- depends on
-
CLAIRDEV-174 claircore: examine needed database changes to record package "system" type
-
- Refinement
-
- is Informed by
-
CLAIRDEV-179 docs: document that Konflux SBoMs include every arch
-
- Refinement
-
- relates to
-
ROX-30588 Claircore SBOM decode API
-
- New
-
-
CLAIRDEV-16 claircore: support purls throughout
-
- To Do
-