Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Sbom: add bootjdk version into sbom #3156

Closed
zdtsw opened this issue Nov 15, 2022 · 1 comment · Fixed by #2987
Closed

Sbom: add bootjdk version into sbom #3156

zdtsw opened this issue Nov 15, 2022 · 1 comment · Fixed by #2987
Assignees
Labels
enhancement Issues that enhance the code or documentation of the repo in any way reproducible-build Sbom issue relate to work of sbom

Comments

@zdtsw
Copy link
Contributor

zdtsw commented Nov 15, 2022

From #3151, we need to have clear bootjdk version (e.g 11.0.17+8) recorded in the sbom.
This helps

  • anyone uses sbom.json be able to do reproducible build locally.
  • help us track exact bootjdk version we are using for build openjdk.

suggestion based on current sbom schema:

components.properties.name: "boot jdk"
components.properties.value: "XXXXX"

Ref: #3013

@zdtsw zdtsw added enhancement Issues that enhance the code or documentation of the repo in any way reproducible-build Sbom issue relate to work of sbom labels Nov 15, 2022
@zdtsw zdtsw self-assigned this Nov 16, 2022
@zdtsw
Copy link
Contributor Author

zdtsw commented Nov 16, 2022

since this raw information can be retrived from "Tool summary" with gcc
so we can have both into

components.properties.name:  "Build Tools Summary"
components.properties.value: "Tools summary: * Boot JDK: openjdk version XXXXXX * Toolchain: gcc (GNU Compiler Collection) * C Compiler: Version XXXXXX * C++ Compiler: Version XXXXXX Build performance summary: * Build jobs: X * Memory limit: XXXXX MB * ccache status: XXXXXX"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement Issues that enhance the code or documentation of the repo in any way reproducible-build Sbom issue relate to work of sbom
Projects
No open projects
Development

Successfully merging a pull request may close this issue.

1 participant