An event is published upon an SBOM ingestion
What does this MR do and why?
This MR adds a new event which will be used to trigger CVS. The event contains the pipeline_id
and is published by IngestReportsService
once the SBOM ingestion is complete.
We also add the dependency_scanning_using_sbom_reports
feature flag. Finally this MR introduces a new bounded_context
entry since existing entries were not a good fit.
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Related to #465544 (closed)
Edited by Nick Ilieskou