Include optional dependencies in SBOM

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Unresolved
    • Priority: Minor - P4
    • None
    • Affects Version/s: None
    • Component/s: None
    • None
    • Rust Drivers
    • None
    • None
    • None
    • None
    • None
    • None

      Scope

      Include optional dependencies in SBOM with "scope": "optional"

      Background & Motivation

      driver/Cargo.toml includes optional dependencies that depend on feature flags. Example:

      # Enable support for on-demand Azure KMS credentials.
azure-kms = ["dep:reqwest"]

      reqwest is an optional dependency enabled by the azure-kms feature flag. It does not appear listed in the sbom.json.

            Assignee:
            Thanh Nguyen
            Reporter:
            Kevin Albertson
            None
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: