New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Generate and publish SBOM for KitOps #703

Open

4 tasks

gorkem opened this issue Jan 21, 2025 · 0 comments

Labels

Contributor

gorkem commented Jan 21, 2025

To improve transparency, security, and compliance, Kit CLI releases should automatically generate and publish an SBOM with each release.

Utilize a generation tool (e.g., Syft, CycloneDX) to create the SBOM.
Incorporate the SBOM generation process into the existing CI/CD workflow for releases
Attach the generated SBOM to the corresponding GitHub release as a downloadable asset.
Update the project’s documentation to include information about the SBOM.

gorkem added the enhancement label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment