Skip to content
This repository was archived by the owner on Jan 9, 2025. It is now read-only.
This repository was archived by the owner on Jan 9, 2025. It is now read-only.

Provide a SBOM for MicroStream #460

@rfichtner

Description

@rfichtner

Is your feature request related to a problem? Please describe.

The creation of SBOMs is expected to be something that will be common practice, or sometimes even mandatory, when you deliver software. The US already has an "Executive Order on Improving the Nation’s Cybersecurity" with the SBOM requirement:
https://www.whitehouse.gov/briefing-room/presidential-actions/2021/05/12/executive-order-on-improving-the-nations-cybersecurity/ See Sec 4.E.vii

Describe the solution you'd like

Create a SBOM for every build of MicroStream. Brian Vermeer has a good article about this topic: https://snyk.io/blog/create-sboms-java-maven-gradle/

Describe alternatives you've considered

Having no SBOM ;)

Additional context

What is an SBOM?
A software bill of materials, often abbreviated as SBOM, is a list of all software components used in an application. The SBOM is made up of third-party open-source libraries, vendor-provided packages, and first-party artifacts built by the organization. You can see it as the full list of ingredients for your applications.

But be careful not to confuse an SBOM with Maven’s Bill Of Materials (BOM).

An SBOM is something you create next to your application so that any user or client has a uniform way to find out what your application is using under the hood.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions