Skip to content

[SEC:HIGH][FP=a2eeb126] Ensure pipeline steps produce an SBOM #58

Description

@github-actions

General Information

  • Severity: high
  • Title: Ensure pipeline steps produce an SBOM
  • Category: pipelineMisconfigurations
  • Rule: AVD-PIPELINE-0022
  • Alert hash: a2eeb126ff88b013a8d3b27d5089d065
  • First seen: 2026-05-22

Description

Consider adding SBOM generation tool to build job 'build-and-lint'

Location

Dependency Details

  • Reachable: False

Metadata

Metadata

Labels

scope:securitySecurity, auth, compliancetype:tech-debtMarks task as a tech-debt item

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions