Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Executive Order SBOM addition #21120

Closed
chasewilson opened this issue Jan 26, 2022 · 3 comments · Fixed by #21278
Closed

Executive Order SBOM addition #21120

chasewilson opened this issue Jan 26, 2022 · 3 comments · Fixed by #21278
Assignees
@wangzelin007
Labels
ADO Issue is documented on MSFT ADO for internal tracking feature-request
Milestone
Mar 2022 (2022-04...

Comments

@chasewilson
Copy link
Contributor

Is your feature request related to a problem? Please describe.

To meet standards set by CyberEO, the Azure DevOps pipeline needs to be updated to produce and maintain an SBOM for Azure CLI releases.

Describe the solution you'd like

Add SBOM Generator to Azure DeVOps Pipeline

Describe alternatives you've considered

Additional context
@ghost ghost added the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Jan 26, 2022
@yonzhan yonzhan added the ADO Issue is documented on MSFT ADO for internal tracking label Jan 26, 2022
@ghost ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Jan 26, 2022
@yonzhan yonzhan added feature-request needs-triage This is a new issue that needs to be triaged to the appropriate team. labels Jan 26, 2022
@ghost ghost removed the needs-triage This is a new issue that needs to be triaged to the appropriate team. label Jan 26, 2022
@yonzhan yonzhan added this to the Feb 2022 (2022-03-01) milestone Jan 26, 2022
@yonzhan
Copy link
Collaborator

yonzhan commented Jan 26, 2022

To meet standards set by CyberEO

@yonzhan
Copy link
Collaborator

yonzhan commented Feb 26, 2022

Some packages are missing from the SBOM generator (ado-sbom-generator)

@wangzelin007
Copy link
Member

Some packages are missing from the SBOM generator (ado-sbom-generator)

Add two issues here:
microsoft/component-detection#73
microsoft/component-detection#74

@wangzelin007 wangzelin007 linked a pull request Mar 4, 2022 that will close this issue
{CI} Generate SBOM manifest for built packages #21278
Merged
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@wangzelin007 wangzelin007

Labels
ADO Issue is documented on MSFT ADO for internal tracking feature-request
Projects
None yet
Milestone
Mar 2022 (2022-04-06)
Development

Successfully merging a pull request may close this issue.

{CI} Generate SBOM manifest for built packages wangzelin007/azure-cli
3 participants
@wangzelin007 @chasewilson @yonzhan