On 2026-09-06, Steve Loughran wrote:
> +1 (binding?)
sure.
> This is the first time I've worried about SBOM validation, which new feature.
> First time I've come across an asf binary tarball with one, FWIW. Nice. Will
> probably be mandatory once the EU CRA goes live.
yes, this is one of the primary reasons for building the cycloncedx
antlib.
Thanks
Stefan
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
