Skip to content

SBOM for 2 different versions of (say) Dropwizard #5

Open

Description

@msymons

As an enhancement, it would be useful to be publish SBOM examples for 2 versions of the same OSS project.

It does not really matter which project is chosen. Dropwizard would suit me because I use it!

The use cases are to allow for testing of tools that consume BOMs and which need to process changes in the BOM for a specific project:

  • Comparison of two BOMs. ie, has the component inventory changed (versions, count of components, etc)
  • Impact of change on auditing/triage.
  • Notifications
  • etc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions