Closed mthalman closed 4 months ago
I couldn't figure out the best area label to add to this issue. If you have write-permissions please help me learn by adding exactly one area label.
We should be able to fix this by opting in to SBOM generation on our unofficial pipelines. https://eng.ms/docs/cloud-ai-platform/devdiv/one-engineering-system-1es/1es-docs/1es-pipeline-templates/features/sbom
This is a regression from the changes in https://github.com/dotnet/docker-tools/pull/1283. That presumed that
ManifestGeneratorTask
is being automatically injected and called by the 1ES templates, via theGenerate SBoM Manifest
step. That's true for the logic in the product repos but not for the validation pipeline in this repo which doesn't include that injected step.