Skip to content

docs: add SBOM design spec and implementation plan#54

Closed
jgamblin wants to merge 1 commit intoCERTCC:mainfrom
jgamblin:feature/sbom-planning
Closed

docs: add SBOM design spec and implementation plan#54
jgamblin wants to merge 1 commit intoCERTCC:mainfrom
jgamblin:feature/sbom-planning

Conversation

@jgamblin
Copy link
Copy Markdown
Contributor

@jgamblin jgamblin commented Apr 3, 2026

Summary

  • Adds design spec and implementation plan for multi-format SBOM generation (CycloneDX 1.6, SPDX 2.3, Markdown)
  • Covers both runtime components (core JS files, CDN deps, vendored libs) and dev dependencies
  • Planning documents only — no implementation code yet

Closes #53

Files

  • docs/superpowers/specs/2026-04-02-sbom-design.md — Design spec with component inventory, output formats, and architecture
  • docs/superpowers/plans/2026-04-02-sbom-implementation.md — Step-by-step implementation plan

Test plan

  • Review design spec for completeness of component inventory
  • Verify all CDN dependencies and vendored libs are accounted for
  • Confirm output format choices (CycloneDX + SPDX) meet project needs

🤖 Generated with Claude Code

Adds CycloneDX 1.6 and SPDX 2.3 SBOM planning documents covering
runtime and dev dependencies for the cveClient project.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@jgamblin
Copy link
Copy Markdown
Contributor Author

jgamblin commented Apr 3, 2026

Closing - opened in error

@jgamblin jgamblin closed this Apr 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add SBOM that identifies all components being used.

1 participant