Skip to content

SBOM generator interface #469

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 59 commits into
base: dev
Choose a base branch
from
Open

SBOM generator interface #469

wants to merge 59 commits into from

Conversation

attiasas
Copy link
Contributor

@attiasas attiasas commented Jun 15, 2025 •
edited
Loading

  • The pull request is targeting the dev branch.
  • The code has been validated to compile successfully by running go vet ./....
  • The code has been formatted properly using go fmt ./....
  • All static analysis checks passed.
  • All tests have passed. If this feature is not already covered by the tests, new tests have been added.
  • Updated the Contributing page / ReadMe page / CI Workflow files if needed.
  • All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

Depends on:

attiasas added 30 commits June 3, 2025 20:43
@attiasas
Move Sca buildinfo logic to technologies package
cfad408
@attiasas
fix breaking changes
00bcad9
@attiasas
Start removing AuditParams from BomGeneration
7c94bc1
@attiasas
Start moving bom logic to buildinfobom file
67214e4
@attiasas
clean after logic move
cd62d2c
@attiasas
Move test to right place
88c6409
@attiasas
Replace AuditParams with BuildInfoBomGeneratorParams
f6335ce
@attiasas
fix breaking changes
942f2f7
@attiasas
add jfrog-ignore
f7365b9
@attiasas
fix static tests
9a0c26a
@attiasas
clean
cf860e9
@attiasas
fix tests
69284a5
@attiasas
fix more path broken tests
9940c37
@attiasas
fix last failing tests
7404da9
@attiasas
Merge remote-tracking branch 'upstream/dev' into move_buildinfo_sca
2f2f8b9
@attiasas
remove old Sbom struct in results
0cd72bb
@attiasas
remove unused JasPackageScanType attributes and vals
129c63e
@attiasas
remove old struct and replace with cyclonedx lib, comment all related…
57bef1c 
… logic
@attiasas
Merge remote-tracking branch 'upstream/dev' into sbom_with_cdx
b1bdb36
@attiasas
add new empty methods, adjust tests to them
3b929ba
@attiasas
Add PackageUrl lib and techutils for cdx conversion
7348b4c
@attiasas
fix purl tests
3b6f617
@attiasas
Add diff calculation with cdx and fix related tests
c0fc6b1
@attiasas
Implement Tree to Cdx for source and binary with tests
150a976
@attiasas
add cdx utils
6177413
@attiasas
rename for-each method for looping results
f2e62fc
@attiasas
rename handlers and add for-each sbom component
4e34736
@attiasas
use for-each sbom component in table format and implement the method
3317abf
@attiasas
implement cdx utils for for-each sbom component
e3125b8
@attiasas
add tests for cdx utils
7412c05
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@attiasas attiasas marked this pull request as ready for review June 17, 2025 08:25
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions GitHub Actions
Copy link

👍 Frogbot scanned this pull request and did not find any new security issues.

@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 17, 2025
@attiasas attiasas added the safe to test Approve running integration tests on a pull request label Jun 19, 2025
@github-actions github-actions bot removed the safe to test Approve running integration tests on a pull request label Jun 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@hadarshjfrog hadarshjfrog Awaiting requested review from hadarshjfrog

@eranturgeman eranturgeman Awaiting requested review from eranturgeman

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
ignore for release Automatically generated release notes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@attiasas