ReviewOS

also looking at this

craft-native/craft

Gate SBOM findings on whether they ship

#321
Merged glennmichael123 wants to merge fix/sbom-shipping-scope into main
5 files +230 -1
.github/workflows/ci.ymlmodified+1-1
Changes to .github/workflows/ci.yml
@@ -283,7 +283,7 @@ jobs:
283283 run: zig fmt --check src/ build.zig
284284
285285 - name: Test failure-safe vulnerability scanning
286 run: bun test scripts/scan-sbom.test.ts scripts/scan-release-artifacts.test.ts
286 run: bun test scripts/scan-sbom.test.ts scripts/scan-release-artifacts.test.ts scripts/sbom-scope.test.ts
287287
288288 - name: Audit Zig C imports
289289 run: bun run verify:cimports