Skip to content

Commit 99a3c62

Browse files
jdduncanjdduncan
committed
Add sbom_generation.yaml file at top level.
1 parent d5f425a commit 99a3c62

File tree

8 files changed

+200
-207
lines changed

8 files changed

+200
-207
lines changed

‎.gitignore

+4-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,10 @@
1+
.DS_Store
2+
artifactSBOM.json
3+
package-lock.json
14
jones-ndb/build/
25
jones-ndb/config.gypi
36
jones-ndb/impl/test/build/
47
jones-ndb/config.waf
5-
**/.DS_Store
68
node_modules/nan
9+
*/node_modules
710

‎database-jones/package-lock.json

-81
This file was deleted.

‎database-jones/package.json

+2-1
Original file line numberDiff line numberDiff line change
@@ -24,10 +24,11 @@
2424
},
2525
"dependencies": {
2626
"jones-promises": "*",
27-
"mysql": "^2.17.1",
27+
"mysql": ">=2.18.1",
2828
"unified_debug": "*"
2929
},
3030
"devDependencies": {
31+
"@cyclonedx/cyclonedx-npm": "^1.19.3",
3132
"jones-test": "*"
3233
}
3334
}

‎jones-mysql/package.json

+33-36
Original file line numberDiff line numberDiff line change
@@ -1,38 +1,35 @@
1-
21
{
3-
"name" : "jones-mysql"
4-
,
5-
"version" : "1.0.6"
6-
,
7-
"description" : "MySQL Service Provider for Database Jones"
8-
,
9-
"keywords" : ["mysql", "orm", "mapping"]
10-
,
11-
"license" : "GPL-2.0"
12-
,
13-
"homepage" : "http://github.com/mysql/mysql-js/"
14-
,
15-
"main" : "impl/mysql_service_provider"
16-
,
17-
"bugs" : { "url" : "http://github.com/mysql/mysql-js/issues"}
18-
,
19-
"contributors" : [ "Craig Russell <papajdo@gmail.com>" ,
20-
"John David Duncan <john.duncan@oracle.com>"
21-
]
22-
,
23-
"dependencies" : { "mysql" : ">=2.0.0",
24-
"unified_debug" : "*"
25-
}
26-
,
27-
"devDependencies" : { "jones-test" : "*"
28-
}
29-
,
30-
"peerDependencies": { "database-jones" : "1.x"
31-
}
32-
,
33-
"repository" : { "type" : "git",
34-
"url": "https://github.com/mysql/mysql-js.git"
35-
}
2+
"name": "jones-mysql",
3+
"version": "1.0.6",
4+
"description": "MySQL Service Provider for Database Jones",
5+
"keywords": [
6+
"mysql",
7+
"orm",
8+
"mapping"
9+
],
10+
"license": "GPL-2.0",
11+
"homepage": "http://github.com/mysql/mysql-js/",
12+
"main": "impl/mysql_service_provider",
13+
"bugs": {
14+
"url": "http://github.com/mysql/mysql-js/issues"
15+
},
16+
"contributors": [
17+
"Craig Russell <papajdo@gmail.com>",
18+
"John David Duncan <john.duncan@oracle.com>"
19+
],
20+
"dependencies": {
21+
"mysql": ">=2.18.1",
22+
"unified_debug": "*"
23+
},
24+
"devDependencies": {
25+
"@cyclonedx/cyclonedx-npm": "^1.19.3",
26+
"jones-test": "*"
27+
},
28+
"peerDependencies": {
29+
"database-jones": "1.x"
30+
},
31+
"repository": {
32+
"type": "git",
33+
"url": "https://github.com/mysql/mysql-js.git"
34+
}
3635
}
37-
38-

‎jones-promises/package.json

+30-33
Original file line numberDiff line numberDiff line change
@@ -1,35 +1,32 @@
1-
21
{
3-
"name" : "jones-promises"
4-
,
5-
"version" : "1.1.1"
6-
,
7-
"description" : "Promises Library"
8-
,
9-
"keywords" : ["promise" , "promises" , "promises/a+" ]
10-
,
11-
"homepage" : "http://github.com/mysql/mysql-js/"
12-
,
13-
"bugs" : { "url" : "http://github.com/mysql/mysql-js/issues" }
14-
,
15-
"license" : "GPL-2.0"
16-
,
17-
"contributors": ["Craig Russell <craig.russell@oracle.com>" ,
18-
"John David Duncan <john.duncan@oracle.com>"
19-
]
20-
,
21-
"main" : "lib/Promise.js"
22-
,
23-
"repository" : { "type" : "git",
24-
"url": "https://github.com/mysql/mysql-js.git"
25-
}
26-
,
27-
"readmeFilename": "README.md"
28-
,
29-
"dependencies" : { "unified_debug" : ""
30-
}
31-
,
32-
"devDependencies" : { "promises-aplus-tests" : "" }
2+
"name": "jones-promises",
3+
"version": "1.1.1",
4+
"description": "Promises Library",
5+
"keywords": [
6+
"promise",
7+
"promises",
8+
"promises/a+"
9+
],
10+
"homepage": "http://github.com/mysql/mysql-js/",
11+
"bugs": {
12+
"url": "http://github.com/mysql/mysql-js/issues"
13+
},
14+
"license": "GPL-2.0",
15+
"contributors": [
16+
"Craig Russell <craig.russell@oracle.com>",
17+
"John David Duncan <john.duncan@oracle.com>"
18+
],
19+
"main": "lib/Promise.js",
20+
"repository": {
21+
"type": "git",
22+
"url": "https://github.com/mysql/mysql-js.git"
23+
},
24+
"readmeFilename": "README.md",
25+
"dependencies": {
26+
"unified_debug": ""
27+
},
28+
"devDependencies": {
29+
"@cyclonedx/cyclonedx-npm": "^1.19.3",
30+
"promises-aplus-tests": ""
31+
}
3332
}
34-
35-

‎jones-test/package.json

+30-31
Original file line numberDiff line numberDiff line change
@@ -1,33 +1,32 @@
1-
21
{
3-
"name" : "jones-test"
4-
,
5-
"version" : "1.4.1"
6-
,
7-
"description" : "Asynchronous Test Harness"
8-
,
9-
"keywords" : ["test" , "harness" ]
10-
,
11-
"homepage" : "http://github.com/mysql/mysql-js/"
12-
,
13-
"bugs" : { "url" : "http://github.com/mysql/mysql-js/issues"}
14-
,
15-
"license" : "GPL-2.0"
16-
,
17-
"contributors": [ "John David Duncan <john.duncan@oracle.com>" ,
18-
"Craig Russell <craig.russell@oracle.com>" ]
19-
,
20-
"main" : "jones-test"
21-
,
22-
"repository" : { "type" : "git",
23-
"url": "https://github.com/mysql/mysql-js.git"
24-
}
25-
,
26-
"scripts" : { "test" : "node selftest/driver"
27-
}
28-
,
29-
"dependencies" : { "unified_debug" : ""
30-
}
2+
"name": "jones-test",
3+
"version": "1.4.1",
4+
"description": "Asynchronous Test Harness",
5+
"keywords": [
6+
"test",
7+
"harness"
8+
],
9+
"homepage": "http://github.com/mysql/mysql-js/",
10+
"bugs": {
11+
"url": "http://github.com/mysql/mysql-js/issues"
12+
},
13+
"license": "GPL-2.0",
14+
"contributors": [
15+
"John David Duncan <john.duncan@oracle.com>",
16+
"Craig Russell <craig.russell@oracle.com>"
17+
],
18+
"main": "jones-test",
19+
"repository": {
20+
"type": "git",
21+
"url": "https://github.com/mysql/mysql-js.git"
22+
},
23+
"scripts": {
24+
"test": "node selftest/driver"
25+
},
26+
"dependencies": {
27+
"unified_debug": ""
28+
},
29+
"devDependencies": {
30+
"@cyclonedx/cyclonedx-npm": "^1.19.3"
31+
}
3132
}
32-
33-

‎sbom_generation.yaml

+76
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
# Copyright (c) 2023-2025, Oracle and/or its affiliates. All rights reserved.
2+
3+
# This OCI DevOps build specification file [1] generates a Software Bill of Materials (SBOM) of the repository.
4+
# The file is needed to run checks for third-party vulnerabilities and business approval according to Oracle’s GitHub policies.
5+
# [1] https://docs.oracle.com/en-us/iaas/Content/devops/using/build_specs.htm
6+
7+
version: 0.1
8+
component: build
9+
timeoutInSeconds: 1000
10+
shell: bash
11+
12+
steps:
13+
- type: Command
14+
name: "Download CycloneDx-cli executable and install dependencies"
15+
command: |
16+
wget https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.24.2/cyclonedx-linux-x64
17+
yum install -y libicu
18+
- type: Command
19+
name: "Generate SBOM for unified_debug"
20+
command: |
21+
pushd unified_debug
22+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
23+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
24+
popd
25+
26+
- type: Command
27+
name: "Generate SBOM for jones-test"
28+
command: |
29+
pushd jones-test
30+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
31+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
32+
popd
33+
34+
- type: Command
35+
name: "Generate SBOM for jones-promises"
36+
command: |
37+
pushd jones-promises
38+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
39+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
40+
popd
41+
42+
- type: Command
43+
name: "Generate SBOM for jones-ndb"
44+
command: |
45+
pushd jones-ndb
46+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
47+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
48+
popd
49+
50+
- type: Command
51+
name: "Generate SBOM for jones-mysql"
52+
command: |
53+
pushd jones-mysql
54+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
55+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
56+
popd
57+
58+
- type: Command
59+
name: "Generate SBOM for database-jones"
60+
command: |
61+
pushd database-jones
62+
npm install && npm install --save-dev @cyclonedx/cyclonedx-npm@1.19.3
63+
npx @cyclonedx/cyclonedx-npm --omit dev --output-format JSON --output-file artifactSBOM.json --spec-version 1.4 --flatten-components
64+
popd
65+
66+
- type: Command
67+
name: "Merge multiple SBOMs using CycloneDX-cli"
68+
command: |
69+
# For more details, visit https://github.com/CycloneDX/cyclonedx-cli/blob/main/README.md
70+
chmod +x cyclonedx-linux-x64
71+
./cyclonedx-linux-x64 merge --input-files database-jones/artifactSBOM.json jones-mysql/artifactSBOM.json jones-ndb/artifactSBOM.json jones-promises/artifactSBOM.json jones-test/artifactSBOM.json unified_debug/artifactSBOM.json --output-file artifactSBOM.json --output-version v1_4
72+
73+
outputArtifacts:
74+
- name: artifactSBOM
75+
type: BINARY
76+
location: ${OCI_PRIMARY_SOURCE_DIR}/artifactSBOM.json

0 commit comments

Comments
 (0)