compiler icon indicating copy to clipboard operation
compiler copied to clipboard
verified publisher icon withastro

[🚧 WIP] Add SBOM (and automate the process)

Open ran-dall opened this issue 3 years ago • 1 comments

Please Don't ship WIP

This commit adds an SBOM to the repository and will automate the process for future use.

SBOM is using the Cyclone DX 1.4 SBOM specification and is currently being generated in XML (this may change in the future to JSON, if it's determined preferable).

Special Thanks to @aFuzzyBear for assistance with the Astro-specific knowledge required to complete these audits.

ran-dall avatar Jul 31 '22 18:07 ran-dall

⚠️ No Changeset found

Latest commit: f1e3b112d26e45d487cb7062b9447dc51d0cd074

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

changeset-bot[bot] avatar Jul 31 '22 18:07 changeset-bot[bot]

Closing this will do later on.

ran-dall avatar Sep 28 '22 00:09 ran-dall