 |
Post AxULMlOcSnOWc4dRQ0 by [email protected] |
 |
More posts by [email protected] |
|
Post #AxUI9RkHudou2bjFTM by [email protected] |
|
0 likes, 1 repeats |
|
|
|
My biggest issue with all the SBOM standards is the lack of a requirement to in… |
|
|
|
Post #AxUKKqnlILlEqQv3uC by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@adulau is it that it’s optional? I see that CycloneDX can have hashes for ea… |
|
|
|
Post #AxUKKquqrzQrCQEixM by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@drewdaniels Component not each file for what I understood in the specs. |
|
|
|
Post #AxULMlOcSnOWc4dRQ0 by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@adulau good point. I missed that components may be multiple files. I haven’t… |
|
|
|
Post #AxULMlUe6ODOulSFoO by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@drewdaniels No worries. I was trying to find a way to add SBOMs in hashlookup.… |
|
|
|
Post #AxUNxM2vsNK2cC4DUe by [email protected] |
|
0 likes, 0 repeats |
|
|
|
@adulau if the component is a file and has a hash then it can. The purpose of t… |
|
|
|
Post #AxUNxM9fTKi4x5DazY by [email protected] |
|
0 likes, 1 repeats |
|
|
|
@drewdaniels Exactly. That’s my biggest issue. It’s not mandatory to have t… |
