Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Switch to Runtime SBOM Data Fetching #10648

Open
tellmeY18 opened this issue Feb 17, 2025 · 3 comments · May be fixed by #10655
Open

Switch to Runtime SBOM Data Fetching #10648

tellmeY18 opened this issue Feb 17, 2025 · 3 comments · May be fixed by #10655
Assignees

Comments

@tellmeY18
Copy link
Member

Current Behavior

  • SBOM (Software Bill of Materials) data is generated during build time
  • Uses scripts/generate-sbom-data.ts script for generation

Proposed Change

  • Remove the build-time generation script
  • Fetch SBOM data directly at runtime from:
    • Frontend SBOM: https://sbom.ohc.network/care_fe/v3.0.0/sbom.json
    • Backend SBOM: https://sbom.ohc.network/care/v3.0.0/sbom.json
@tellmeY18 tellmeY18 added this to Care Feb 17, 2025
@tellmeY18 tellmeY18 moved this to Triage in Care Feb 17, 2025
@rajku-dev
Copy link
Contributor

rajku-dev commented Feb 17, 2025

I would like to work on this issue.

@ashwinpraveengo
Copy link
Contributor

ashwinpraveengo commented Feb 17, 2025

@tellmeY18 Can I work on this issue ?..

Methods to Solve

  • Delete or comment out the usage of scripts/generate-sbom-data.ts in the build process.
  • Identify where the SBOM data is being used in the application and update the code to fetch the SBOM JSON dynamically using fetch

@github-actions github-actions bot added needs-triage question Further information is requested labels Feb 17, 2025
@hrit2773
Copy link
Contributor

hrit2773 commented Feb 17, 2025

@tellmeY18 I identified it and can make a PR can you assign me

@Jacobjeevan Jacobjeevan removed question Further information is requested needs-triage labels Feb 17, 2025
@tellmeY18 tellmeY18 moved this from Triage to In Progress in Care Feb 17, 2025
@ashwinpraveengo ashwinpraveengo linked a pull request Feb 17, 2025 that will close this issue
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Status: In Progress
Development

Successfully merging a pull request may close this issue.

5 participants