SoftwareDesignLab / SBOM-in-a-Box

SBOM-in-a-Box is a unified platform to promote the production, consumption, and utilization of Software Bills of Materials.

MIT License

9 stars 0 forks source link

OSI additional Tools + Refactor #303

Closed dlg1206 closed 11 months ago

dlg1206 commented 1 year ago

Added new validation and runner scripts for OSI for more clear success confirmation

TODO

[x] Finish OSI refactor - refactor to use config files to help with expandability / readability
[x] Database cleanup: option to keep the generated sboms in the DB or remove them
[x] Copy projects "as is" and don't do any processing to change the structure
[x] getRelevantTools replace/add to getAllTools to only use relevant tools to help cut down on generation time

Stretch TODO

[ ] Master OSI config file to determine which tools to install on the box
[ ] Async updates to APIs about the tools running / status complete

[v9.1.0-alpha] - (11/22/2023)

OSI v4, add extra tool support and major overhaul of OSI to support future expansion

Added

OSI

validate.sh: Validation script that runs before launching flask api server in OSI to confirm what languages, package managers, and tools are installed
runner.sh: Launch script that sets up flask and runs validate.sh
New Tool config files to use YAML files instead of old Tool mapper
Dynamic tool checking to find what tools apply to the project
9 new tools to OSI

SVIP

New SVIP endpoint .../svip/generators/osi/project to upload code to bound directories

Changed

OSI

Fixed installation bugs inside OSI container
Fixed bad port mappings inside container
Fixed missing permissions in dockerfile for mac
Updated Adding Additional OSI Tools to user new configs/scripts
Overhaul debug messages inside OSI to provide more inside on tool generation

SVIP

Consolidated OSIv3 java files into Controller / Services for API
SVIP endpoint .../svip/generators/osi/tools takes optional list param to get all tools or just the ones that can be used against the uploaded project
SVIP endpoint .../svip/generators/osi/ no longer takes project zip file (moved to .../svip/generators/osi/project)

Removed

Outdated Docker Binaries from OSI documentation

close #288 , #293,