Skip to content

v8.0.5a

Compare
Choose a tag to compare
@dlg1206 dlg1206 released this 18 Oct 01:49
· 606 commits to main since this release
06011a5

Release Notes

Numerous bugfixes and QoL changes. The full changelog can be found here

Added

  • Added SBOM Generation support by two methods via API:
    • Open Source Integration (OSI)
      • Generate an aggregate SBOM from a number of Open Source SBOM generators
      • Additional details can be found here
    • SVIP Generation
      • SVIP generation uses regex and natural language processing techniques to parse source code for dependencies used in the code.
      • Uses dependency manifest files ( pom.xml, package.json, etc ) to enhance with additional information, but are not required
      • Additional details and CLI usage can be found here

Changed

  • Refactor database into more robust structure to support future usage of SBOM, VEX, Quality Report, and Diff Report files
  • Refactor API into services and controllers
  • Refactor OSI into standalone service that can be used outside of SVIP
  • Restructure directory structure to by features

Known Issues

What's Changed

New Contributors

Full Changelog: v7.1.2a...v8.0.5a