kubernetes-sigs/cluster-api
Security Self-Assessment: [STRIDE-TAMPER-1] Produce a SBoM
開放
#6,153 建立於 2022年2月16日
area/securityhelp wantedkind/featurepriority/backlogsig/securitytriage/accepted
倉庫指標
- 星標
- (4,267 顆星)
- PR 合併指標
- (PR 指標待抓取)
描述
User Story
As a cluster operator, i want to know the list of dependencies Cluster API brings for assurance within our organisation's software supply chain.
Detailed Description
- Create SBoM of all the Cluster API components and verify checksum as a post build action
cc @PushkarJ for adding more details.
/kind feature /area security