Skip to content

Extend dependencies exporter to support group

Why are we doing this work

Currently dependency list and exporter are only available on the project level.

Relevant links

Non-functional requirements

  • Documentation:
  • Feature flag:
  • Performance:
  • Testing:

Implementation plan

Note: The fact that ::Sbom::DependenciesFinder will be used instead of ::Security::DependencyListService means that both licenses and vulnerabilities data won't be available in the report. Those columns could be either be left there with empty values or removed for now.

Verification steps

Edited by Zamir Martins