PowerShell / PowerShell Public
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add SBOM manifest to nuget packages #16711
Conversation
Co-authored-by: James Truher [MSFT] <jimtru@microsoft.com>
Co-authored-by: James Truher [MSFT] <jimtru@microsoft.com>
Reverting incorrect change to verbose message.
|
This pull request has been automatically marked as Review Needed because it has been there has not been any activity for 7 days. |
|
@adityapatwardhan Ping... |
|
This PR has Quantification details
Why proper sizing of changes matters
Optimal pull request sizes drive a better predictable PR flow as they strike a
What can I do to optimize my changes
How to interpret the change counts in git diff output
Was this comment helpful? |
|
Handy links: |
# Conflicts: # build.psm1 # tools/cgmanifest.json
# Conflicts: # build.psm1 # tools/cgmanifest.json # Conflicts: # build.psm1 # tools/cgmanifest.json # tools/packaging/packaging.psm1 # tools/releaseBuild/azureDevOps/templates/nuget.yml
# Conflicts: # build.psm1 # tools/cgmanifest.json # Conflicts: # build.psm1 # tools/cgmanifest.json # tools/packaging/packaging.psm1 # tools/releaseBuild/azureDevOps/templates/nuget.yml # Conflicts: # tools/packaging/packaging.psm1 # tools/releaseBuild/azureDevOps/templates/nuget.yml


This PR adds SBOM manifests for created nuget packages for coordinated package builds.
SBOM manifests are added by splitting the existing
New-ILNugetPacakgefunction, which creates all nuget packages at once, intoNew-ILNugetPackageSourceandNew-ILNugetPackageFromSourcefunctions. These new functions create source and package for just one file at a time, so that an SBOM manifest can be created (via yml template) for each file/package.PR Checklist
.h,.cpp,.cs,.ps1and.psm1files have the correct copyright headerWIP:or[ WIP ]to the beginning of the title (theWIPbot will keep its status check atPendingwhile the prefix is present) and remove the prefix when the PR is ready.(which runs in a different PS Host).