Skip to content

An event is published upon an SBOM ingestion

Nick Ilieskou requested to merge 465544-sbom-ingestion-event into master

What does this MR do and why?

This MR adds a new event which will be used to trigger CVS. The event contains the pipeline_id and is published by IngestReportsService once the SBOM ingestion is complete.

We also add the dependency_scanning_using_sbom_reports feature flag. Finally this MR introduces a new bounded_context entry since existing entries were not a good fit.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Related to #465544 (closed)

Edited by Nick Ilieskou

Merge request reports