Skip to content

Add gitlab meta schema version property

Oscar Tovar requested to merge add-gitlab-meta-schema-version-property into master

What does this MR do?

This MR fixes the CycloneDX generation so that we include the correct properties described in the taxonomy.

Specifically, it does the following:

  • Add a gitlab:meta:schema_version property that is required.
  • Move to gitlab:dependency_scanning:file:path
  • Move to gitlab:dependency_scanning:package_manager:name

Without these, the SBoM report object that's parsed will not include the source of the data which will be needed to generate the findings from the sbom and advisories.

What are the relevant issue numbers?

gitlab-org/gitlab#398580 (closed)

Does this MR meet the acceptance criteria?

Edited by Oscar Tovar

Merge request reports

Loading