mirror of https://github.com/wolfSSL/wolfssh.git
5323b26b0a
Move the make sbom / install-sbom / uninstall-sbom recipe out of Makefile.am into a reusable scripts/sbom.am fragment; Makefile.am now just declares the product facts (name, LICENSING, wolfssl dependency, GPL-3.0-only default) and includes it. Add a GitHub Actions workflow covering both SBOM paths: - autotools: build wolfSSL + wolfSSH, run make sbom, assert SPDX validity, CycloneDX identity, reproducibility, and the wolfssl dependency edge. - embedded: run gen-sbom against user_settings.h (via pcpp) + the wolfSSH source set, asserting the same identity/validity/reproducibility plus that user_settings.h options and the wolfssl dependency are captured. Both gracefully skip on a gen-sbom that predates the wolfSSL SBOM change. Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com> |
||
|---|---|---|
| .. | ||
| code-coverage.yml | ||
| codespell.yml | ||
| coverity-scan-fixes.yml | ||
| cppcheck.yml | ||
| interop-mlkem.yml | ||
| multi-compiler.yml | ||
| network-contention-test.yml | ||
| os-check.yml | ||
| paramiko-sftp-test.yml | ||
| sanitizer.yml | ||
| sbom.yml | ||
| scp-test.yml | ||
| sftp-test.yml | ||
| singlethread-check.yml | ||
| sshd-test.yml | ||
| test-fatfs.yml | ||
| tpm-ssh.yml | ||
| windows-check.yml | ||
| windows-sftp.yml | ||
| x509-interop.yml | ||
| zephyr.yml | ||