SBOM support - Githubissues

ecosyste-ms / opencollective

An open API service for software projects hosted on Open Collective.

https://opencollective.ecosyste.ms

GNU Affero General Public License v3.0

1 stars 0 forks source link

SBOM support #21

Open andrew opened 5 months ago

andrew commented 5 months ago

[ ] upload an sbom
- [x] text
- [ ] url
- [ ] file upload
[x] normalize the SBOM from all of the different formats (SPDX, CyclonDX, syft, github etc)
[x] store normalized SBOM in database
[x] display SBOM artifacts
[x] enrich artifact list with projects that are on open collective

Future:

[ ] enrich artifacts list with data for all packages

andrew commented 5 months ago

Will likely need to extract the packages out into a seperate table as the current approach to indexing on packageurl won't scale as the field won't fit into an index for repos with many packages like https://github.com/babel/babel