brend-smits / github-sbom-generator-action

Retrieve all requested SBOMs from the GitHub repositories.

Hi there 👋,

Hello, I'm Brend Smits, a software engineer deeply interested in DevSecOps and prototyping. My primary objective is to simplify the lives of developers by crafting valuable innovations. I approach challenges with an exploratory mindset and embrace an entrepreneurial attitude. Rather than specializing in a specific language or framework, I adapt to the unique requirements of each problem, employing diverse technologies to achieve optimal solutions.

Technologies

• Rust
• C#
• JavaScript/Typescript
• Ruby
• Bash
• Anything else that gets the job done

Areas of focus

• Secure Software Supply Chain
  • SBOM in particular
• Opensource
• Innersource
• DevSecOps

Some (useless) statistics

github-sbom-generator-action's Issues

Debug mode seems to always get enabled when -d is specified

Missing logic to check when the option is entered, if the value is actually set to -d true. We currently assume it's always true if someone adds the -d option. Which makes it incompatible with current composite action.

Use Rust instead of Bash

Can we use Rust instead of Bash?
This will make it easier for me to maintain and expand the action in the future

Make repository list argument optional and add repo name option

If no repository list argument is given, we should fall back to the repo name, which has the the current repository as a default.