fix: upload Dependency-Track SBOMs by managed UUID #38

Merged
Wuast94 merged 2 commits from codex/dtrack-uuid-upload-standard into main 2026-06-22 12:32:12 +02:00
Owner

Summary

  • add a tested Dependency-Track upload client that ensures parent/child projects and uploads BOMs by UUID
  • use stable ci project versions for PR/main SBOM uploads and mark release SBOMs as latest
  • replace inline workflow curl uploads with the shared Go CLI

Verification

  • just format
  • go test ./internal/dtrack ./cmd/dtrack-sbom-upload -v -count=1
  • live DTrack API probe: create/upload/poll/delete temporary projects
  • live updatarr DTrack cleanup and re-upload: ci plus v0.1.0 under parent Wuast94/updatarr@portfolio
  • just lint
  • just test
  • just test-integration
  • just everything
## Summary - add a tested Dependency-Track upload client that ensures parent/child projects and uploads BOMs by UUID - use stable ci project versions for PR/main SBOM uploads and mark release SBOMs as latest - replace inline workflow curl uploads with the shared Go CLI ## Verification - just format - go test ./internal/dtrack ./cmd/dtrack-sbom-upload -v -count=1 - live DTrack API probe: create/upload/poll/delete temporary projects - live updatarr DTrack cleanup and re-upload: ci plus v0.1.0 under parent Wuast94/updatarr@portfolio - just lint - just test - just test-integration - just everything
fix: upload dependency-track sboms by managed project uuid
Some checks failed
CI / SBOM (pull_request) Failing after 58s
CI / Quality (pull_request) Successful in 1m34s
CI / Build (pull_request) Successful in 58s
e6a1efca6e
Wuast94 force-pushed codex/dtrack-uuid-upload-standard from e6a1efca6e
Some checks failed
CI / SBOM (pull_request) Failing after 58s
CI / Quality (pull_request) Successful in 1m34s
CI / Build (pull_request) Successful in 58s
to 552d8865e4
Some checks failed
CI / Build (pull_request) Has been cancelled
CI / Quality (pull_request) Has been cancelled
CI / SBOM (pull_request) Has been cancelled
2026-06-22 08:11:09 +02:00
Compare
Wuast94 force-pushed codex/dtrack-uuid-upload-standard from 552d8865e4
Some checks failed
CI / Build (pull_request) Has been cancelled
CI / Quality (pull_request) Has been cancelled
CI / SBOM (pull_request) Has been cancelled
to 99116e23fe
All checks were successful
CI / SBOM (pull_request) Successful in 1m46s
CI / Quality (pull_request) Successful in 1m59s
CI / Build (pull_request) Successful in 54s
2026-06-22 08:11:32 +02:00
Compare
fix: rotate dependency-track latest tag for releases
All checks were successful
CI / SBOM (pull_request) Successful in 1m25s
CI / Quality (pull_request) Successful in 3m22s
CI / Build (pull_request) Successful in 3m59s
7c700b9207
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Wuast94/updatarr!38
No description provided.