The GitHub Actions job "Tests" on airflow.git has succeeded.
Run started by GitHub user potiuk (triggered by potiuk).

Head commit for run:
e5364a7166145304bd352d7aa93167dd8adb38b2 / Jarek Potiuk <[email protected]>
Add release management command that generates SHOM information

We should generate machine-readable SBOM information for our
users to consume, therefore we need to have an automated process
to generate dependency information. We are using cyclonedx standard
to generate the information from two sources:

* constraints of airlfow for PyPI dependencies
* yarn.lock to generate npm dependencies

The script uses officially published docker container of the
CycloneDX organisation that parses both constraints of ours
and yarn lock and produces standard-compliant json output.

The SBOM information is published on our website under
the URL scheme:

https://airflow.apache.org/docs/apache-airflow/<version>/sbom/apache-airflow-sbom-pythonX.Y.json

Since there are different versions for different Python versions,
we are publishing SBOM files for all Python

Report URL: https://github.com/apache/airflow/actions/runs/5246593646

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to