dsmiley commented on PR #4966: URL: https://github.com/apache/solr/pull/4966#issuecomment-5914834135
Again, the sha1 file approach _should_ become stable/reliable on the 10x line, and it's efficient to do the processing that way instead of comparing JARs in multiple distributions. Nonetheless I could switch this to the latter; Claude did so locally for my 9.11 analysis. > (SBOM): it's only listing mappings for jars that have a vex file Sounds like a non-starter? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
