Deterministic cyclonedx output

jfrog / build-info-go

build-info-go is a Go library and a CLI, which allows generating build-info for a source code project.

https://www.buildinfo.org

Apache License 2.0

61 stars 34 forks source link

Open LogFlames opened 3 weeks ago

LogFlames commented 3 weeks ago

[x] All tests passed. If this feature is not already covered by the tests, I added new tests.
[x] All static analysis checks passed.
[x] This pull request is on the dev branch.
[x] I used gofmt for formatting the code before submitting the pull request.

This is a suggested solution to #135.

By sorting the array of components, dependencies and sub-dependencies of the created cyclonedx BOM output is deterministic.

github-actions[bot] commented 3 weeks ago

CLA Assistant Lite bot All contributors have signed the CLA ✍️ ✅

LogFlames commented 3 weeks ago

I have read the CLA Document and I hereby sign the CLA

LogFlames commented 2 weeks ago

Some workflows must be approved by a maintainer, @eyalbe4 can you help?