Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SBOM generation support for .NET Applications #46272

Open
baronfel opened this issue Jan 24, 2025 · 0 comments
Open

SBOM generation support for .NET Applications #46272

baronfel opened this issue Jan 24, 2025 · 0 comments
Labels
Area-NetSDK Area-SBOM Epic Groups multiple user stories. Can be grouped under a theme.
Milestone

Comments

@baronfel
Copy link
Member

Is your feature request related to a problem? Please describe.

.NET Developers should be able to have an integrated, robust SBOM generation capability in the toolchain, so that .NET applications and libraries have correct, updated SBOMs for consumers of the software to use.

Describe the solution you'd like

This epic tracks the work list to complete integration of Microsoft.SBOM.Targets into the .NET SDK. In the simplest case, as soon as a user sets <GenerateSBOM>true<GenerateSBOM>, the SDK should

  • insert an implicit PackageReference to Microsoft.SBOM.Targets
  • ensure that the SBOM generation provided by that package is hooked into the publish target
  • ensure that relevant .NET toolchain information is provided to the SBOM generation to ensure that future analysis has good traceability of the artifacts
@baronfel baronfel added the Epic Groups multiple user stories. Can be grouped under a theme. label Jan 24, 2025
@baronfel baronfel added this to the 10.0.1xx milestone Jan 24, 2025
@dotnet-issue-labeler dotnet-issue-labeler bot added Area-NetSDK untriaged Request triage from a team member labels Jan 24, 2025
@baronfel baronfel added Area-SBOM and removed untriaged Request triage from a team member labels Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area-NetSDK Area-SBOM Epic Groups multiple user stories. Can be grouped under a theme.
Projects
None yet
Development

No branches or pull requests

1 participant