Spartan #195
Merged
Spartan #195
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
ButterB0wl
added a commit
that referenced
this pull request
May 8, 2020
* added 'sbom' subcommand to pipe the cyclonedx bom to std_out so it can be picked up by other scanners * fixed the linting issues * pinned the production dependency on minimist from node-persist -> mkdirp -> [email protected] to [email protected] due to a security vuln failing our dogfood scan * added node script in package.json for an iq dogfood scan * made include license data false for getInstalledDeps, but getSbomFromCommand already had it as false so it didn't change IQ scan times. Might be worth stripping everything but the purls to keep it standard with the boms of the other tools * fixed linting errors and removed the vscode settings json as those options are going to differ locally * changed the circle-ci build to install from the package-lock.json * trying npm ci install... * removed the package-lock.json dependency * Spartan (#195) 💥 * implemented spartan bom for sbom output and iq scans Co-authored-by: Jeffry Hesse <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Allow for a more sparse SBOM to be created
This pull request makes the following changes:
cc @bhamail / @DarthHater / @allenhsieh / @ken-duck