enhancementhacktoberfesthelp wanted
Metriche repository
- Star
- (27 stelle)
- Metriche merge PR
- (Metriche PR in attesa)
Descrizione
Is your feature request related to a problem? Please describe.
As part of the Cyber Resilience Act we are required to add SBOM to all of your projects. Me make extensive use of CI pipelines for analysis and deployments. For every repository we need to add and maintain cyclonedx-node-yarn as additional dev-dependency.
Describe the solution you'd like
Similar to cyclonedx-node-npm we would like cyclonedx-node-yarn to support external manifests:
cyclonedx-yarn [options] [--] [<package-manifest>]
This would enable this project to be used as a Docker container, which can easily added to every CI pipeline and maintained centrally, instead of per-project.
Additionally, in mono-repositories the dependency would have to be added to every single sub-project currently.
Describe alternatives you've considered
Wrapping up the current version into a Docker container, which does not help, as it only works on the current project.