Lars Francke

Currently, if a user provides a tag/label with a comma that'll break our agent un unpredictable ways. One solution, for now, is to simply disallow such labels.

Reproducible SBOMs

1

CycloneDX 1.6 (I believe) allows producing reproducible SBOMs by leaving out timestamps. We should add an option to allow the same.

This adds a method to be able to parse a generic json_serde::Value This is not currently possible because the specs are private.

Make bom-ref use relative paths for workspace items as well

6

Similar to PURLs

Currently, we produce SBOMs like this: ``` "licenses": [ { "expression": "MIT" } ], ``` There is an argument to be made that it'd be easier for consumers to use...

A rust build can produce various artifacts in the `/target` folders. The SBOMs might have different names (e.g. `bom.xml` or the name of the package) and it's not trivial (without...

Different lifecycle phases

1

Just having a single "end" date doesn't seem sufficient to me. We'd need different lifecycle phases. One example is here: https://access.redhat.com/support/policy/updates/openshift#ocp4_phases

Allow configuration of listeners

1

We want listeners in Kafka to be fully configurable. They should not be automatically added as they are now. We will follow the Strimzi model (documented here: https://strimzi.io/docs/operators/latest/overview.html#configuration-points-broker_str) with the...

ZK doesn't automatically clean up snapshots by default. This might be something we want to expose: https://zookeeper.apache.org/doc/r3.4.5/zookeeperAdmin.html#sc_maintenance

This is for Client to Server communication only.