Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Reproducible SBOMs #514

Open
lfrancke opened this issue Oct 28, 2023 · 2 comments
Open

Reproducible SBOMs #514

lfrancke opened this issue Oct 28, 2023 · 2 comments

Comments

@lfrancke
Copy link
Contributor

lfrancke commented Oct 28, 2023 •
edited
Loading

CycloneDX 1.6 (I believe) allows producing reproducible SBOMs by leaving out timestamps. We should add an option to allow the same.
@lfrancke lfrancke mentioned this issue Nov 12, 2023
Merged
@drupol
Copy link

drupol commented May 8, 2024

I'm also looking for a solution here (context: nikstur/bombon#92).

The serialNumber UUID attribute is also not reproducible.

@lfrancke
Copy link
Contributor Author

We'd love to take a PR for this if you're interested.
We can't promise that someone will get to it soon I'm afraid :(

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lfrancke @drupol