Should have automatic registration for all OSS components used

[ryancrawcour]

Our CI/CD process needs to include registrations for each OSS component we're using We need to do two registrations for each component -

• that we're using it internally
• that we're distributing it

[ryancrawcour]

To register our use of the OSS component we need to follow the guidance laid out here https://docs.opensource.microsoft.com/tools/cg.html

[ryancrawcour]

Need to register Confluent.Kafka

[kev-ms]

As per Open Source team, Component Governance doesn't support Github actions, recommendation is to setup a pipeline in ADO and setup component governance there.

[ryancrawcour]

let's park this, for now, and wait for the team to enable github action support.

[brandynbrown]

@kev-ms do we have a timeline for support? If not, we should probably go the suggested route of ADO in order to become unblocked, no? @ryancrawcour

[ryancrawcour]

we do not have a timeline as yet. for now, i would park this and wait for the support to arrive.