Skip to content

Can analyse package_source to find add_sbom for vendored builds - #46

Open
commel wants to merge 1 commit into
mainfrom
feat/45-package-deb-part1
Open

commel wants to merge 1 commit into
mainfrom
feat/45-package-deb-part1

Conversation

@commel

@commel commel commented Sep 9, 2026

Copy link
Copy Markdown
Contributor

On-behalf-of: SAP b.ritter@sap.com

What this PR does / why we need it:
adds the capability to find vendored_builds using the "add_sbom" keyword in prepare_source from gardenlinux/package-build#49

Which issue(s) this PR fixes:
refs #45

Special notes for your reviewer:
This is one part of a change group for sbom.

refs #45

Signed-off-by: Bernd Ritter <ritter@b1-systems.de>
On-behalf-of: SAP <b.ritter@sap.com>
@commel
commel requested a review from sh4sm September 9, 2026 13:34
@commel commel self-assigned this Sep 9, 2026
@commel commel added this to the 2026-09 milestone Sep 9, 2026

@sh4sm sh4sm left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks. The new VendoredPackage flag is only checked in this one new test, would be great if we can also check in the other tests that it is false there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants