Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add initial support for generating SPDX SBOM documents (COMPOSER-2274) #930

Merged
merged 5 commits into from
Sep 19, 2024
Merged

Add initial support for generating SPDX SBOM documents (COMPOSER-2274) #930

merged 5 commits into from
Sep 19, 2024

Commits on Sep 19, 2024

  1. Schutzfile: update osbuild ref 

    Update the ref to a version, which supports SBOM documents.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
    @thozza
    thozza committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    7c2ca9e View commit details
    Browse the repository at this point in the history

  2. pkg: add 'sbom' package for working with SBOM documents 

    Add a new `sbom` package for working with SBOM documents. It provides a
very simple wrapper struct, which currently supports only SPDX standard.
The SBOM document is for now stored in a raw JSON form, to not have to
convert the raw data from and to the specific in-memory representation
on the worker.

The idea is to provide a bit of an abstraction from the specific SBOM
implementation, so that in the future, it would be possible to create
`sbom.Document` from SBOM documents of various standards and also
serialize it back to various SBOM standards.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
    @thozza
    thozza committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    c51053f View commit details
    Browse the repository at this point in the history

  3. dnfjson/Depsolve: support requesting SBOM document 

    Extend the `Solver.Depsolve()` method to allow requesting SBOM document
for the depsolved transaction. In case an SBOM document is requested, a
pointer to `sbom.Document` instance is returned with the depsolve
result.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
    @thozza
    thozza committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    2491078 View commit details
    Browse the repository at this point in the history

  4. dnfjson: wrap Depsolve() return values by DepsolveResult struct 

    Since the number of the `Solver.Depsolve()` return values is slowly
getting out of hands, introduce a `DepsolveResult` struct containing all
of the return values. `Depsolve()` now returns a pointer to
`DepsolveResult`.

Signed-off-by: Tomáš Hozza <thozza@redhat.com>
    @thozza
    thozza committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    b57eb98 View commit details
    Browse the repository at this point in the history

  5. dnfjson/depsolveResult: mark optional struct members as omitempty 

    Signed-off-by: Tomáš Hozza <thozza@redhat.com>
    @thozza
    thozza committed Sep 19, 2024
    Configuration menu
    Copy the full SHA
    746950b View commit details
    Browse the repository at this point in the history