Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Insert Implicit PackageReference for Microsoft.SBOM.Targets into the .NET SDK #46273

Open
baronfel opened this issue Jan 24, 2025 · 0 comments
Open
Labels
Area-NetSDK Area-SBOM untriaged Request triage from a team member

Comments

@baronfel
Copy link
Member

Is your feature request related to a problem? Please describe.

When a user has <GenerateSBOM>true</GenerateSBOM> then the SDK should insert an up to date implicit PackageReference to the Microsoft.SBOM.Targets package, if the user has not already added one. This means we need to.

  • have a tracking property for the version of Microsoft.SBOM.Targets to insert
  • have automation to bump our tracking version of the package
  • allow the user to override that property
  • have a condition that checks the existing PackageReferences for this package
  • have notification messages that tell the user the SDK can provide this reference

This work has already begun in #43151

@dotnet-issue-labeler dotnet-issue-labeler bot added Area-NetSDK untriaged Request triage from a team member labels Jan 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Area-NetSDK Area-SBOM untriaged Request triage from a team member
Projects
None yet
Development

No branches or pull requests

1 participant