Dimitri John Ledkov
Dimitri John Ledkov
Nitpicks: ```json { "SPDXID": "SPDXRef-Package-go-containerregistry-v0.20.2", "name": "go-containerregistry", "versionInfo": "v0.20.2", "filesAnalyzed": false, "licenseConcluded": "NOASSERTION", "licenseDeclared": "Apache-2.0", "downloadLocation": "NOASSERTION", "originator": "Organization: Google", "supplier": "Organization: Google", "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:github/google/[email protected]",...
Expanding on the above, given we now have packages for things, I do wonder if we should remove externalref PURL alltogether and instead fill in: https://spdx.github.io/spdx-spec/v2.3/package-information/#77-package-download-location-field with direct url to...
I also dream a dream, to be able to encode/include 'libfoo-static' as a package in sbom, when it is used in build-depends, or some other field declaring that. I.e. such...
Yes that. Plan was for me to build a few things. And then see how they look. And yeah instrument small thing that is a useful demonstrator of all the...
Given some teams are trying to deliver products on top of 23.10 and will have 24.04-devel in parallel I have now opened kernel 23.10 track, set build-base to core22, yet...
I am now unable to build noble v6.6 kernel snap, both locally and in launchpad, using the same recipe, which i must do during noble development to promote both v6.6...
> This is on purpose, @sergiusens this is now incompatible with what Ubuntu requires during its development, it is now on critical path to unblock kernel development for Ubuntu Destkop...
so talking to @jonjohnsonjr about this, there is more to this than meets the eye: * whilst file location of this file is not great, it doesn't matter as much...
> Some "devil's advocate" thoughts are occurring to me about this whole approach: > Thank you for triggering existential crisis on a Saturday. We need scanning with up to date...
> How are those resolved yaml files generated now? I see them in terraform-provider-apko outputs in my terraform state. But I am failing to see how it is done, and...