Skip to content

Add native SBOM input validators and source tests - #1039

Merged
rmcdaniel merged 25 commits into
mainfrom
feat/server-1012-native-sbom
Nov 5, 2026
Merged

Add native SBOM input validators and source tests#1039
rmcdaniel merged 25 commits into
mainfrom
feat/server-1012-native-sbom

Merge remote-tracking branch 'origin/main' into feat/server-1012-nati…

19ba1bb
Select commit
Loading
Failed to load commit list.
SonarQubeCloud / SonarCloud Code Analysis succeeded Nov 5, 2026 in 3m 57s

Quality Gate passed

Issues
38 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Annotations

Check failure on line 95 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "blobs/sha256/" 4 times. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU684&open=AaGtpkrh5JqxoHSfU684&pullRequest=1039

Check warning on line 188 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68v&open=AaGtpkpZ5JqxoHSfU68v&pullRequest=1039

Check warning on line 125 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU69A&open=AaGtpkrh5JqxoHSfU69A&pullRequest=1039

Check warning on line 466 in tests/Unit/Support/native_sbom_policy_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkre5JqxoHSfU68z&open=AaGtpkre5JqxoHSfU68z&pullRequest=1039

Check warning on line 125 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU689&open=AaGtpkrh5JqxoHSfU689&pullRequest=1039

Check warning on line 110 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68k&open=AaGtpkpZ5JqxoHSfU68k&pullRequest=1039

Check warning on line 157 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68q&open=AaGtpkpZ5JqxoHSfU68q&pullRequest=1039

Check warning on line 107 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68j&open=AaGtpkpZ5JqxoHSfU68j&pullRequest=1039

Check warning on line 70 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Remove this redundant Exception class; it derives from another which is already caught. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU686&open=AaGtpkrh5JqxoHSfU686&pullRequest=1039

Check failure on line 136 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "linux/arm64" 3 times. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU683&open=AaGtpkrh5JqxoHSfU683&pullRequest=1039

Check warning on line 89 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68i&open=AaGtpkpZ5JqxoHSfU68i&pullRequest=1039

Check warning on line 125 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU687&open=AaGtpkrh5JqxoHSfU687&pullRequest=1039

Check failure on line 218 in scripts/ci/native_sbom_policy.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "sha256:" 3 times. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrm5JqxoHSfU69B&open=AaGtpkrm5JqxoHSfU69B&pullRequest=1039

Check warning on line 159 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68r&open=AaGtpkpZ5JqxoHSfU68r&pullRequest=1039

Check warning on line 171 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68u&open=AaGtpkpZ5JqxoHSfU68u&pullRequest=1039

Check warning on line 125 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU68_&open=AaGtpkrh5JqxoHSfU68_&pullRequest=1039

Check warning on line 161 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68s&open=AaGtpkpZ5JqxoHSfU68s&pullRequest=1039

Check warning on line 113 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68l&open=AaGtpkpZ5JqxoHSfU68l&pullRequest=1039

Check failure on line 76 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal "index.json" 3 times. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU682&open=AaGtpkrh5JqxoHSfU682&pullRequest=1039

Check warning on line 446 in tests/Unit/Support/native_sbom_policy_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkre5JqxoHSfU68x&open=AaGtpkre5JqxoHSfU68x&pullRequest=1039

Check warning on line 479 in tests/Unit/Support/native_sbom_policy_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkre5JqxoHSfU681&open=AaGtpkre5JqxoHSfU681&pullRequest=1039

Check failure on line 244 in scripts/ci/native_sbom_policy.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Define a constant instead of duplicating this literal r"[0-9a-f]{40}" 3 times. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrm5JqxoHSfU69C&open=AaGtpkrm5JqxoHSfU69C&pullRequest=1039

Check warning on line 150 in tests/Unit/Support/native_sbom_archive_test.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this exception test to have only one invocation possibly throwing an exception. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkpZ5JqxoHSfU68p&open=AaGtpkpZ5JqxoHSfU68p&pullRequest=1039

Check warning on line 125 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Use concise character class syntax '\d' instead of '[0-9]'. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU68-&open=AaGtpkrh5JqxoHSfU68-&pullRequest=1039

Check failure on line 52 in scripts/ci/native_sbom_archive.py

See this annotation in the file changed.

@sonarqubecloud sonarqubecloud / SonarCloud Code Analysis

Refactor this function to reduce its Cognitive Complexity from 25 to the 15 allowed. 

See more on https://sonarcloud.io/project/issues?id=durable-workflow_server&issues=AaGtpkrh5JqxoHSfU685&open=AaGtpkrh5JqxoHSfU685&pullRequest=1039
View more details on SonarQubeCloud