CycloneDX / specification

OWASP CycloneDX is a full-stack Bill of Materials (BOM) standard that provides advanced supply chain capabilities for cyber risk reduction. SBOM, SaaSBOM, HBOM, AI/ML-BOM, CBOM, OBOM, MBOM, VDR, and VEX
https://cyclonedx.org/
Apache License 2.0
338 stars 57 forks source link

chore: add linter for protobuf schema files #384

Closed jkowalleck closed 3 months ago

jkowalleck commented 4 months ago

we currntly do have linters for the XML schema. we currntly do have linters for the JSON schema. we currntly do NOT have linters for the ProtocolBuffer schema, don't we?

goal: introduce an automated tool chain, that can

this tooling should monitor

this tooling should run automatically on:

the (github) workflow should be encapsulated standalone, not interfering any other/existing workflows

this tooling should be able to run locally

jkowalleck commented 4 months ago

a quick internet search found the following candidates for the job

jkowalleck commented 4 months ago

while on it, it might help to add schema annotation to all the test resources(*.textproto)

spec: https://protobuf.dev/reference/protobuf/textformat-spec/#header

example:

# proto-file: schema/bom-1.6.proto
# proto-message: Bom
jkowalleck commented 3 months ago

all done via https://github.com/CycloneDX/specification/pull/385 and ff