snyk / parlay

Enrich SBOMs with data from third party services
Apache License 2.0
121 stars 19 forks source link

Snyk enrich is looking up user info per package #46

Closed mcombuechen closed 9 months ago

mcombuechen commented 1 year ago

When enriching an SBOM, the snyk command will fetch user data to infer the user’s org ID per package. Since the org ID is unlikely to change while an SBOM is being enriched, it should rather be looked up once and injected in subsequent requests.