Skip to content

Sca scan interface #473

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Draft
wants to merge 65 commits into
base: dev
Choose a base branch
from
Draft

Sca scan interface #473

wants to merge 65 commits into from

Conversation

attiasas
Copy link
Contributor

  • The pull request is targeting the dev branch.
  • The code has been validated to compile successfully by running go vet ./....
  • The code has been formatted properly using go fmt ./....
  • All static analysis checks passed.
  • All tests have passed. If this feature is not already covered by the tests, new tests have been added.
  • Updated the Contributing page / ReadMe page / CI Workflow files if needed.
  • All changes are detailed at the description. if not already covered at JFrog Documentation, new documentation have been added.

attiasas added 30 commits June 3, 2025 20:43
@attiasas
Move Sca buildinfo logic to technologies package
cfad408
@attiasas
fix breaking changes
00bcad9
@attiasas
Start removing AuditParams from BomGeneration
7c94bc1
@attiasas
Start moving bom logic to buildinfobom file
67214e4
@attiasas
clean after logic move
cd62d2c
@attiasas
Move test to right place
88c6409
@attiasas
Replace AuditParams with BuildInfoBomGeneratorParams
f6335ce
@attiasas
fix breaking changes
942f2f7
@attiasas
add jfrog-ignore
f7365b9
@attiasas
fix static tests
9a0c26a
@attiasas
clean
cf860e9
@attiasas
fix tests
69284a5
@attiasas
fix more path broken tests
9940c37
@attiasas
fix last failing tests
7404da9
@attiasas
Merge remote-tracking branch 'upstream/dev' into move_buildinfo_sca
2f2f8b9
@attiasas
remove old Sbom struct in results
0cd72bb
@attiasas
remove unused JasPackageScanType attributes and vals
129c63e
@attiasas
remove old struct and replace with cyclonedx lib, comment all related…
57bef1c 
… logic
@attiasas
Merge remote-tracking branch 'upstream/dev' into sbom_with_cdx
b1bdb36
@attiasas
add new empty methods, adjust tests to them
3b929ba
@attiasas
Add PackageUrl lib and techutils for cdx conversion
7348b4c
@attiasas
fix purl tests
3b6f617
@attiasas
Add diff calculation with cdx and fix related tests
c0fc6b1
@attiasas
Implement Tree to Cdx for source and binary with tests
150a976
@attiasas
add cdx utils
6177413
@attiasas
rename for-each method for looping results
f2e62fc
@attiasas
rename handlers and add for-each sbom component
4e34736
@attiasas
use for-each sbom component in table format and implement the method
3317abf
@attiasas
implement cdx utils for for-each sbom component
e3125b8
@attiasas
add tests for cdx utils
7412c05
attiasas added 17 commits June 16, 2025 10:59
@attiasas
Merge remote-tracking branch 'origin/sbom_with_cdx' into sbom_generat…
e087423 
…or_interface
@attiasas
add option to dump cdx content to file
19712b8
@attiasas
move appsConfigModule to be attribute of target and infer multiModule…
cbfd55d 
…Project
@attiasas
Encapsulate logic in parallel runner
3757ea1
@attiasas
Add Bom to Tree conversion for dependencies
217b402
@attiasas
add cdx utils
8f1d07d
@attiasas
create Sbom Gen unified func to use with the interface
84c8f72
@attiasas
implement Sbom Gen interface for build-info (install) the current def…
6687dd5 
…ault generator
@attiasas
separate bom-gen stage from sca-scan stage and use SBOM for deps
0884354
@attiasas
fix static tests
7718534
@attiasas
fix tests
f98d988
@attiasas
add new tests for cdx utils
5ba9daf
@attiasas
add new tests for common
4aaf70c
@attiasas
fix tests
b2dbfe0
@attiasas
fix more tests
e87ab43
@attiasas
fix more tests
048fa68
@attiasas
Sbom Scan Strategy
cda5d05
@attiasas attiasas added the ignore for release Automatically generated release notes label Jun 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
ignore for release Automatically generated release notes
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@attiasas