Skip to content

Add a basic SBOM workflow (closes #1838) #1854

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
o1oo11oo merged 15 commits into from
Oct 5, 2023
Merged

Add a basic SBOM workflow (closes #1838) #1854

Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
2ad6589
#1838 Use trivy to generate CycloneDX SBOMs
Aug 8, 2023
643937f
#1838 Add a parser for CycloneDX SBOMs
Aug 8, 2023
1af7a18
#1838 Add a Dependency-Track persistence hook
Aug 9, 2023
812303e
#1838 Clarify CycloneDX parser Makefile changes
Sep 1, 2023
55a4a7c
#1838 Add unit tests for dependencytrack hook
Sep 4, 2023
332a175
#1838 Add unit tests for parser-cyclonedx
Sep 4, 2023
3c8aab6
#1838 Move trivy-sbom to its own scanner
Sep 8, 2023
fc8b413
#1838 Add CycloneDX test file to sbom parser tests
Sep 11, 2023
c9f34df
#1838 Add integration tests for trivy-sbom scanner
Sep 11, 2023
282a671
#1838 Add SBOM components to GitHub workflows
Sep 11, 2023
7a1453d
#1838 Exclude more files from helm chart
Sep 11, 2023
337bdce
#1838 Cross-reference SBOM workflow components
Sep 15, 2023
dccdeac
#1838 Check Dependency-Track response for errors
Sep 15, 2023
67c3f4f
#1838 Fix image name and version recognition
Sep 12, 2023
06f6874
#1838 Add trivy-sbom-image to telemetry service
Sep 19, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
#1838 Exclude more files from helm chart 
During CI the persistence-dependencytrack hook fails because the helm
chart (or some file in there) is larger than allowed. To fix this, copy
over ignored files and patterns from elastic's .helmignore.

Signed-off-by: Lukas Fischer <lukas.fischer@iteratec.com>
  • Loading branch information
Lukas Fischer
Lukas Fischer committed Sep 18, 2023
commit 7a1453d8aa3c10dfa00fee566a2350ddf0d13ec9
18 changes: 18 additions & 0 deletions hooks/persistence-dependencytrack/.helmignore
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,6 @@
# SPDX-FileCopyrightText: the secureCodeBox authors
#
# SPDX-License-Identifier: Apache-2.0
# Patterns to ignore when building packages.
# This supports shell glob matching, relative path matching, and
# negation (prefixed with !). Only one pattern per line.
Expand All @@ -21,3 +24,18 @@
.idea/
*.tmproj
.vscode/
# Node.js files
node_modules/*
package.json
package-lock.json
src/*
config/*
Dockerfile
.dockerignore
docs/*
*.tar
hook/*
integration-tests/*
examples/*
coverage/*
Makefile