api.adoptium.net icon indicating copy to clipboard operation
api.adoptium.net copied to clipboard

21.0.6+7 Windows SBOM files missing in the API

Open kmpzr opened this issue 10 months ago • 3 comments

Describe the bug SBOM files are available on the release page of 21.0.6+7 but the API https://api.adoptium.net/v3/assets/feature_releases/21/ga does not return them for Windows binaries.

To Reproduce List of image_type=sbom from the 21.0.6+7 (latest) release.

$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.image_type=="sbom")) | length'
10

List of image_type=sbom && os=windows from the 21.0.6+7 (latest) release.

$ curl -s 'https://api.adoptium.net/v3/assets/feature_releases/21/ga' | jq -r '.[0] | .binaries | map(select(.os=="windows")) | map(select(.image_type=="sbom")) | length'
0

Expected behavior The API should return the SBOM files for Windows binaries.

Device (please complete the following information):

  • OS: [Linux]
  • Browser [e.g. firefox, curl]

kmpzr avatar Feb 24 '25 15:02 kmpzr

Added an issue for the cause of this issue: https://github.com/adoptium/temurin-build/issues/4139

johnoliver avatar Feb 26 '25 10:02 johnoliver

Same issue with released jdk-24+36 x86_windows. ( aarch64_windows unreleased) https://api.adoptium.net/v3/binary/latest/24/ga/windows/x64/sbom/hotspot/normal/adoptium?project=jdk

sophia-guo avatar Mar 31 '25 18:03 sophia-guo

@johnoliver before the root cause be fixed https://github.com/adoptium/temurin-build/issues/4139, could the API return the SBOM files for Windows jdk-24+36, same as what has been done to 21.0.6+7? Otherwise aqa-tests job will continue hit the issue https://ci.adoptium.net/job/Grinder/12864/console.

sophia-guo avatar Mar 31 '25 19:03 sophia-guo