cyclonedx-ruby-gem
cyclonedx-ruby-gem copied to clipboard
✨ Core v1.7 Enablement
| # | 📍 NOTE | What | |
|---|---|---|---|
| 1️⃣ | #38 is first | Modernize gem structure | |
| 2️⃣ | Then see #37 next | Upgrade to v1.7 spec | <=== You are here |
| 3️⃣ | Then see #39 | Add --validate feature | |
| 4️⃣ | Then see #40 | Add --include-metadata feature |
- Add spec version selection end-to-end with a new
--spec-versionflag (default 1.7). - Update JSON and XML outputs to honor the selected spec version.
- Update fixtures, help text, tests, and docs.
NOTE:
- Additional fields like
bom-ref,publisher,metadata.tools,dependenciesare optional and can be added incrementally.
Files:
lib/bom_helpers.rb:- Added
SUPPORTED_SPEC_VERSIONS,cyclonedx_xml_namespacehelper.build_bomnow acceptsspec_versionand routes to:build_json_bom(gems, spec_version)sets specVersion to the provided version.build_bom_xml(gems, spec_version)sets xmlns to http://cyclonedx.org/schema/bom/.
- Added
lib/bom_builder.rb:- Added
--spec-versionwith validation; default is 1.7. - Pass
@spec_versionintobuild_bom(@gems, @bom_output_format, @spec_version).
- Added
#38 was merged.
@pboling would you mind rebasing/updating this PR?
Will do today!
@jkowalleck rebase complete
@jkowalleck It seems like I should be able to get to the Codacy report somehow but I'm not sure where to find the link to it from the CI results.