1
0
mirror of synced 2025-12-25 02:17:36 -05:00

Remove use of dependency-graph-sbom-export feature (#50319)

This commit is contained in:
Peter Bengtsson
2024-04-26 07:37:52 -04:00
committed by GitHub
parent 3d5c1f359d
commit c3e2221f43
6 changed files with 8 additions and 10 deletions

View File

@@ -55,8 +55,8 @@ To generate the dependency graph, {% data variables.product.company_short %} loo
- The dependency graph includes information on your _direct_ dependencies and _transitive_ dependencies.
- The dependency graph is automatically updated when you push a commit to {% data variables.product.company_short %} that changes or adds a supported manifest or lock file to the default branch, and when anyone pushes a change to the repository of one of your dependencies.
- You can see the dependency graph by opening the repository's main page on {% data variables.product.product_name %}, and navigating to the **Insights** tab.{% ifversion dependency-graph-sbom-export %}
- {% data reusables.dependency-graph.sbom-export %}{% endif %}
- You can see the dependency graph by opening the repository's main page on {% data variables.product.product_name %}, and navigating to the **Insights** tab.
- {% data reusables.dependency-graph.sbom-export %}
{% data reusables.dependency-submission.dependency-submission-link %}

View File

@@ -27,7 +27,7 @@ When you push a commit to {% data variables.product.product_name %} that changes
When you create a pull request containing changes to dependencies that targets the default branch, {% data variables.product.prodname_dotcom %} uses the dependency graph to add dependency reviews to the pull request. These indicate whether the dependencies contain vulnerabilities and, if so, the version of the dependency in which the vulnerability was fixed. For more information, see "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)."
{% ifversion dependency-graph-sbom-export %}{% data reusables.dependency-graph.sbom-export %}{% endif %}
{% data reusables.dependency-graph.sbom-export %}
## Dependency graph availability

View File

@@ -2,7 +2,9 @@
title: Exporting a software bill of materials for your repository
intro: You can export a software bill of materials or SBOM for your repository from the dependency graph. SBOMs allow transparency into your open source usage and help expose supply chain vulnerabilities, reducing supply chain risks.
versions:
feature: dependency-graph-sbom-export
fpt: '*'
ghes: '*'
ghec: '*'
permissions: 'Anyone can export the dependency graph of a repository as a software bill of materials. The SBOM export will contain a list of the dependencies that are used in the repository.'
type: how_to
topics:

View File

@@ -101,14 +101,10 @@ Alternatively, you can write your own action to submit dependencies for your pro
{% data reusables.dependency-graph.sbom-intro %}
{% ifversion dependency-graph-sbom-export %}
To generate an SBOM, you can use:
- the {% data variables.product.prodname_dotcom %} user interface. For more information about how to export an SBOM for a repository using information from the dependency graph, see "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/exporting-a-software-bill-of-materials-for-your-repository)."
- the REST API. For more information, see "[AUTOTITLE](/rest/dependency-graph/sboms)."
- {% data variables.product.prodname_actions %}. The following actions will generate an SBOM for your repository and attach it as a workflow artifact which you can download and use in other applications. For more information about downloading workflow artifacts, see "[AUTOTITLE](/actions/managing-workflow-runs/downloading-workflow-artifacts)."
{% else %}
You can use {% data variables.product.prodname_actions %} to generate an SBOM. The following actions will generate an SBOM for your repository and attach it as a workflow artifact which you can download and use in other applications. For more information about downloading workflow artifacts, see "[AUTOTITLE](/actions/managing-workflow-runs/downloading-workflow-artifacts)."
{% endif %}
Action | Details | <span style="white-space: nowrap;">Maintained by {% data variables.product.prodname_dotcom %}</span>
--- | --- | ---