Open macpijan opened 3 months ago
BeataZdunczyk
commented
3 months ago @macpijan We are already addressing this as part of https://github.com/Dasharo/dasharo-issues/issues/955
Feature request: We provided links to all components' licenses at some point. I think that information should be included in SBOM's release notes. It has already happened a couple of times when someone asked about licenses for all components included. Maybe Opness Score should also account for that somehow.
pietrushnic
commented
3 months ago We should publish SBOMs in the Dasharo SBOM release section; those SBOMs should comply with the state of the art in a given project. The key question is how hard it would be to introduce that:
Maybe we should have a label for SBOM since we have more issues directly or indirectly related:
krystian-hebel
commented
2 weeks ago Not limited to laptops, but otherwise fits this issue: AFAICT none of the SBOMs list edk2-platforms, even though it is used by most of the platforms supported by Dasharo.
mkopec
commented
2 days ago Tried to make some improvements for the upcoming release:
The problem you're addressing (if any)
The SBOM information is limited to coreobot / edk2 revisions
Describe the solution you'd like
For some platforms, the SBOM information we provide is more extensive Such as: https://docs.dasharo.com/variants/protectli_vp46xx/releases/#v120-2024-03-25
Where is the value to a user, and who might that user be?
No response
Describe alternatives you've considered
No response
Additional context
No response