Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Time since last SBoM analysis in Dependency-Track. #10270

Merged

Conversation

fniessink
Copy link
Member

Allow for measuring the time since the last analysis date of an SBoM in Dependency-Track using the 'source up-to-dateness' metric. This can be configured using the new 'project event types' parameter. Possible values are 'last SBOM upload', 'last SBOM analysis', or 'all event types' (oldest of last SBOM analysis and last SBOM upload).

Closes #9764.

@fniessink fniessink linked an issue Nov 12, 2024 that may be closed by this pull request
@fniessink fniessink force-pushed the 9764-allow-for-measuring-dependency-track-last-analysis-date branch 4 times, most recently from cee513b to cba440f Compare November 12, 2024 19:04
@fniessink fniessink requested a review from wkoot November 12, 2024 19:15
Allow for measuring the time since the last analysis date of an SBoM in Dependency-Track using the 'source up-to-dateness' metric. This can be configured using the new 'event type' parameter. Possible values are 'last SBOM upload', 'last SBOM analysis', or 'both (oldest of last SBOM analysis and last SBOM upload)'.

Closes #9764.
@fniessink fniessink force-pushed the 9764-allow-for-measuring-dependency-track-last-analysis-date branch from cba440f to c96f973 Compare November 12, 2024 21:43
@fniessink fniessink enabled auto-merge (rebase) November 12, 2024 21:43
Copy link

sonarcloud bot commented Nov 12, 2024

@fniessink fniessink merged commit fb006e9 into master Nov 12, 2024
34 checks passed
@fniessink fniessink deleted the 9764-allow-for-measuring-dependency-track-last-analysis-date branch November 12, 2024 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow for measuring Dependency-Track last analysis date
2 participants