Skip to content

Use docker image to merge CycloneDX SBOMs

Craig Andrews requested to merge candrews/gitlab:use-cyclonedx-cli-docker-image into master

What does this MR do and why?

Instead of downloading the cyclonedx-cli executable, installing dependencies, and making it executable, use the cyclonedx/cyclonedx-cli docker image.

Using the image eases maintenance and reduces job run time.

Screenshots or screen recordings

n/a

How to set up and validate locally

n/a

MR acceptance checklist

This checklist encourages us to confirm any changes have been analyzed to reduce risks in quality, performance, reliability, security, and maintainability.

Merge request reports