-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
feat: support sbom list as request body #292
Conversation
22d793d
to
1e03a21
Compare
Pending merging of the api changes to pass CI compilation: RHEcosystemAppEng/exhort-api-spec#13 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This solution doesn't conform with the OpenApi spec where the /analysis
endpoint returns an AnalysisReport
object. See https://github.com/RHEcosystemAppEng/exhort-api-spec/blob/main/api/v4/openapi.yaml#L53
I recommend creating a new endpoint /batchanalysis
for that purpose. With that you won't need to add the list
parameter to the MediaType
1e03a21
to
4cef6dc
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I would remove all references to rootRef
and use a dictionary in the requests so that you can use the keys to identify the different SBOMs.
src/main/java/com/redhat/exhort/integration/backend/ExhortIntegration.java
Outdated
Show resolved
Hide resolved
src/main/java/com/redhat/exhort/integration/backend/ExhortIntegration.java
Outdated
Show resolved
Hide resolved
src/main/java/com/redhat/exhort/integration/backend/ExhortIntegration.java
Outdated
Show resolved
Hide resolved
src/main/java/com/redhat/exhort/integration/root/RootTransformer.java
Outdated
Show resolved
Hide resolved
src/main/java/com/redhat/exhort/integration/root/RootTransformer.java
Outdated
Show resolved
Hide resolved
3239ff2
to
7149dc7
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I agree with the solution.
Looks good
src/main/java/com/redhat/exhort/integration/backend/ExhortIntegration.java
Outdated
Show resolved
Hide resolved
src/main/java/com/redhat/exhort/integration/providers/ProviderResponseHandler.java
Outdated
Show resolved
Hide resolved
Signed-off-by: Olga Lavtar <[email protected]>
To support reporting package vulnerabilities in base images:
batch-analysis
to handle the requests with a dictionary of sboms as payloadJira: https://issues.redhat.com/browse/APPENG-2250 and https://issues.redhat.com/browse/APPENG-2251