kubernetes-sigs/cluster-api
Security Self-Assessment: [STRIDE-TAMPER-1] Produce a SBoM
开放
#6,153 创建于 2022年2月16日
area/securityhelp wantedkind/featurepriority/backlogsig/securitytriage/accepted
仓库指标
- 星标
- (4,267 个星标)
- PR 合并指标
- (PR 指标待抓取)
描述
User Story
As a cluster operator, i want to know the list of dependencies Cluster API brings for assurance within our organisation's software supply chain.
Detailed Description
- Create SBoM of all the Cluster API components and verify checksum as a post build action
cc @PushkarJ for adding more details.
/kind feature /area security