Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding some descriptions for tools that don't have one and updating axios #71

Merged
merged 17 commits into from
Sep 9, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 1 addition & 0 deletions .github/requirements.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
yamale==5.2.1
15 changes: 15 additions & 0 deletions .github/workflows/build-pull-request.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,21 @@ jobs:
uses: actions/setup-node@v4
with:
node-version: 'lts/*'

- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: '3.10'
cache: 'pip' # caching pip dependencies
- run: pip install -r .github/requirements.txt

- name: Lint Catalog Data
run: yamllint -d relaxed SBOM-Catalog

- name: Schema Check Catalog Data
run: yamale -s SBOM-Catalog/schemas/data.yaml SBOM-Catalog/public/data.yaml

- name: Schema Check Catalog Filters
run: yamale -s SBOM-Catalog/schemas/filters.yaml SBOM-Catalog/public/filters.yaml

- name: Install dependencies
run: cd SBOM-Catalog && npm install
Expand Down
3 changes: 2 additions & 1 deletion SBOM-Catalog/contribute.md
Original file line number Diff line number Diff line change
Expand Up @@ -43,14 +43,15 @@ Abilities describe the capabilities of the tool. In what part of the software de
- **Generate** - *Can automatically generate a SBOM*
- **Merge** - *Can merge several SBOMs*
- **Validate** - *Can validate a SBOM against the file schema or requirements like defined by the NTIA*
- **Sign** - *Can sign a SBOM (according to the signage process of the schema)*

##### Type
SBOMs may contain different forms of the minimum information sourced from different
product artifacts. The following types are supported as published by the [NTIA](https://www.cisa.gov/resources-tools/resources/types-software-bill-materials-sbom). Because many tools specifically support the scanning of container images, the category **Container** is added additionally. Even if container scans can be considered *Analyzed*:
- Design
- Source
- Build
- Analyzed
- Analyze
- Deployed
- Runtime
- Container
Expand Down
Loading