Skip to content
Snippets Groups Projects

Add props field to SBOM component parser

Merged Aditya Tiwari requested to merge 433084-add-prop-to-comp into master

What does this MR do and why?

Add props field to SBOM component parser

Add props field to SBOM component CI parser class

Changelog: added

Screenshots or screen recordings

Screenshot_2023-12-18_at_1.45.50_PM

How to set up and validate locally

Use the following code

You can use following sample sbom file generated in https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium/ project pipeline.

gl-sbom-report.cdx.json


file = File.read 'gl-sbom-report.cdx.json'
data_hash = JSON.parse(file)
raw_report_data = data_hash.to_json
report = Gitlab::Ci::Reports::Sbom::Report.new
raw_report_data
r = Gitlab::Ci::Parsers::Sbom::Cyclonedx.new.parse!(raw_report_data, report)
report
report.components

Numbered steps to set up and validate the change are strongly suggested.

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #433084 (closed)

Edited by Aditya Tiwari

Merge request reports

Loading
Loading

Activity

Filter activity
  • Approvals
  • Assignees & reviewers
  • Comments (from bots)
  • Comments (from users)
  • Commits & branches
  • Edits
  • Labels
  • Lock status
  • Mentions
  • Merge request status
  • Tracking
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
  • Loading
Please register or sign in to reply
Loading