pnoltes commented on issue #825: URL: https://github.com/apache/celix/issues/825#issuecomment-5531415913
@Adarsh-Me Thanks for proposing to pick this up. Please note that there is currently already some development for the SBOM generation. Ideally the work done for this issues, combines with that. See [SBOM PR](https://github.com/apache/celix/pull/845) for more details. For the triage, any plans how? I am still learning the SCA landspace, but I expect a first low threshold solution could be to configure a VEX (cyclonedx or open vex) file in our SCM. This should work for triage on the main development branch, but to be honest I am not yet sure how this could work for already released Apache Celix versions. But maybe we can start small, and if needed create additional issues to improve the solution. I also expect we can learn this from other ASF projects. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
