Skip to content

Commit 127efda

Browse files
authored
Add sbom_generation file
This PR adds an [OCI DevOps build specification file](https://docs.oracle.com/en-us/iaas/Content/devops/using/build_specs.htm) that generates a Software Bill of Materials (SBOM) of the repository. This file is needed to run checks for third-party vulnerabilities and business approval according to Oracle’s GitHub policies. Please approve and merge this PR. If you have questions, please reach out to the Oracle GitHub team.
1 parent e8c8809 commit 127efda

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

sbom_generation.yaml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
# Copyright (c) 2023, Oracle and/or its affiliates. All rights reserved.
2+
3+
version: 0.1
4+
component: build
5+
timeoutInSeconds: 1000
6+
shell: bash
7+
8+
steps:
9+
- type: Command
10+
name: "Install cyclonedx_py module"
11+
command: |
12+
pip install cyclonedx-bom
13+
- type: Command
14+
name: "Run Python cyclonedx_py module"
15+
command: |
16+
# For more details, visit https://github.com/CycloneDX/cyclonedx-python/blob/main/README.md
17+
python3 -m cyclonedx_py -r -pb --format json -o artifactSBOM.json --schema-version 1.4
18+
outputArtifacts:
19+
- name: artifactSBOM
20+
type: BINARY
21+
location: ${OCI_PRIMARY_SOURCE_DIR}/artifactSBOM.json

0 commit comments

Comments
 (0)