Develop and add an Evergreen task to upload SBOM to Kondukto using SilkBomb for master, v7.0, v8.0, v8.1, v8.2

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Done
    • Priority: Minor - P4
    • 8.3.0-rc0, 8.2.2, 7.0.26, 8.0.16
    • Affects Version/s: None
    • Component/s: None
    • None
    • v8.2, v8.0, v7.0
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      ToDo:
      Add evergreen build task (should be triggered in the Build process) that upload generated SBOM to Kondukto using SilkBomb.

      Only for the following branches:
      master, v7.0, v8.0, v8.1, v8.2

      Motivation:

      Previously, SBOM in GitHub was being consumed by Black Duck and Kondukto pulled data from Black Duck via an integration. Now that Blackduck will be out of the picture, we need a mechanism for Kondutko to get SBOM updates that don't require manual uploading to Kondukto.

      Definition of Done:

      SBOM being visible and parsed by Kondukto so it can scan dependencies for vulnerabilities.

            Assignee:
            Eduard Kovalets
            Reporter:
            Eduard Kovalets
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: