kubernetes-sigs/cluster-api

Security Self-Assessment: [STRIDE-TAMPER-1] Produce a SBoM

オープン

#6,153 opened on 2022/02/16

 (32 件のコメント) (0 件のリアクション) (1 人の担当者)Go (1,532 件のフォーク)auto 404
area/securityhelp wantedkind/featurepriority/backlogsig/securitytriage/accepted

Repository metrics

Stars
 (4,267 個のスター)
PR merge metrics
 (PR metrics pending)

説明

User Story

As a cluster operator, i want to know the list of dependencies Cluster API brings for assurance within our organisation's software supply chain.

Detailed Description

  • Create SBoM of all the Cluster API components and verify checksum as a post build action

cc @PushkarJ for adding more details.

/kind feature /area security

コントリビューターガイド