gh-112302: Add Software Bill-of-Materials (SBOM) tracking for dependencies (#112303)

This commit is contained in:
Seth Michael Larson 2023-12-07 10:01:58 -06:00 • committed by GitHub
parent 2d76be251d
commit 21221c398f
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
7 changed files with 2499 additions and 1 deletions

4
.github/CODEOWNERS vendored
View file

@ -190,3 +190,7 @@ Doc/howto/clinic.rst @erlend-aasland
# WebAssembly
/Tools/wasm/ @brettcannon
# SBOM
/Misc/sbom.spdx.json @sethmlarson
/Tools/build/generate_sbom.py @sethmlarson

View file

@ -9,6 +9,7 @@ on:
paths:
- ".github/workflows/mypy.yml"
- "Lib/test/libregrtest/**"
- "Tools/build/generate_sbom.py"
- "Tools/cases_generator/**"
- "Tools/clinic/**"
- "Tools/peg_generator/**"
@ -34,6 +35,7 @@ jobs:
matrix:
target: [
"Lib/test/libregrtest",
"Tools/build/",
"Tools/cases_generator",
"Tools/clinic",
"Tools/peg_generator",