Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for other ecosystems besides Maven and NPM #96

Open
heruan opened this issue Sep 28, 2023 · 0 comments
Open

Add support for other ecosystems besides Maven and NPM #96

heruan opened this issue Sep 28, 2023 · 0 comments
Labels
enhancement New feature or request

Comments

@heruan
Copy link
Member

heruan commented Sep 28, 2023

We currently support two dependency ecosystems in the kit: Maven and NPM. These cover all the application dependencies, but not the environment the application runs in, e.g. Docker images. To add support for other ecosystems besides Maven and NPM, we need:

  • have those packages in the SBOM (preferably with CycloneDX plugins, e.g. docker/sbom-cli-plugin);
  • handle ecosystem dynamically when building requests and parsing responses to/from the OSV API;
  • update the UI accordingly to be able to show/filter the new ecosystems.
@heruan heruan added the enhancement New feature or request label Sep 28, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant