Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ci(SBOM): better SBOM maintenance #2481

Merged
merged 5 commits into from
Jan 4, 2023
Merged

ci(SBOM): better SBOM maintenance #2481

merged 5 commits into from
Jan 4, 2023

Conversation

Molkree
Copy link
Contributor

@Molkree Molkree commented Jan 3, 2023

Born from discussion in related issue #1646 (comment).

This will run a scheduled workflow that should update SBOMs every week if there are any changes. Also added an option to run it manually if there's a need (as part of a release workflow for example).

@codecov-commenter
Copy link

codecov-commenter commented Jan 3, 2023

Codecov Report

Merging #2481 (75e69ad) into main (a93f003) will decrease coverage by 4.47%.
The diff coverage is n/a.

@@            Coverage Diff             @@
##             main    #2481      +/-   ##
==========================================
- Coverage   82.34%   77.87%   -4.48%     
==========================================
  Files         591      591              
  Lines        9729     9729              
  Branches     1319     1319              
==========================================
- Hits         8011     7576     -435     
- Misses       1372     1850     +478     
+ Partials      346      303      -43     
Flag Coverage Δ
longtests 76.94% <ø> (-4.93%) ⬇️
win-longtests 75.35% <ø> (-0.05%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files Coverage Δ
cve_bin_tool/data_sources/curl_source.py 36.45% <0.00%> (-58.34%) ⬇️
cve_bin_tool/data_sources/nvd_source.py 22.82% <0.00%> (-35.69%) ⬇️
cve_bin_tool/cvedb.py 42.23% <0.00%> (-31.06%) ⬇️
cve_bin_tool/data_sources/osv_source.py 34.11% <0.00%> (-28.51%) ⬇️
cve_bin_tool/data_sources/gad_source.py 49.36% <0.00%> (-21.52%) ⬇️
cve_bin_tool/available_fix/debian_cve_tracker.py 63.26% <0.00%> (-14.29%) ⬇️
cve_bin_tool/data_sources/redhat_source.py 49.66% <0.00%> (-13.25%) ⬇️
cve_bin_tool/async_utils.py 83.44% <0.00%> (-11.04%) ⬇️
test/test_cli.py 76.97% <0.00%> (-10.80%) ⬇️
cve_bin_tool/output_engine/pdfbuilder.py 83.83% <0.00%> (-7.19%) ⬇️
... and 3 more

📣 We’re building smart automated test selection to slash your CI/CD build times. Learn more

Copy link
Contributor

@terriko terriko left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, thanks!

@terriko terriko merged commit 10c9766 into intel:main Jan 4, 2023
@Molkree Molkree deleted the sbom-ci branch January 4, 2023 01:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants