sechmachine/VerseVDI-Data-Plane
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

build(gateway): generate deterministic SPDX SBOM

Browse Source
This commit is contained in:
sechmachine
2026-07-30 22:47:55 +07:00
parent 786c96b110
commit 08eb6dc36c
10 changed files with 570 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Makefile
+11 -1
View File
@@ -1,8 +1,10 @@
.PHONY: format-check module-verify build vet test openspec gateway-linux verify
.PHONY: format-check module-verify build vet test openspec gateway-linux gateway-sbom verify
GO ?= go
OPENSPEC ?= openspec
DIST_DIR ?= dist
SOURCE_REVISION ?= $(shell git rev-parse HEAD)
SOURCE_DATE ?= $(shell git show -s --format=%cI HEAD)
format-check:
@test -z "$$(gofmt -l $$(find gateway -type f -name '*.go' -print))"
@@ -27,4 +29,12 @@ gateway-linux:
CGO_ENABLED=0 GOOS=linux GOARCH=amd64 GOWORK=off $(GO) build -mod=readonly -trimpath -buildvcs=false -ldflags=-buildid= -o "$(DIST_DIR)/verse-gateway-linux-amd64" ./cmd/verse-gateway
CGO_ENABLED=0 GOOS=linux GOARCH=arm64 GOWORK=off $(GO) build -mod=readonly -trimpath -buildvcs=false -ldflags=-buildid= -o "$(DIST_DIR)/verse-gateway-linux-arm64" ./cmd/verse-gateway
gateway-sbom:
$(GO) run ./cmd/verse-gateway-sbom \
-source-revision "$(SOURCE_REVISION)" \
-source-date "$(SOURCE_DATE)" \
-artifact "amd64=$(DIST_DIR)/verse-gateway-linux-amd64" \
-artifact "arm64=$(DIST_DIR)/verse-gateway-linux-arm64" \
-output "$(DIST_DIR)/verse-gateway.spdx.json"
verify: format-check module-verify build vet test openspec