Dan,
Thanks for sharing your insights.
My customers need the "Build SBOM", not a source SBOM. The SBOM must contain
details of the components in the Windows Zip file used by consumers to
install curl.
Per Daniels recommendation I've entered an issue for this:
https://github.com/curl/curl-for-w
On Wed, Jul 09, 2025 at 03:44:56PM +0200, Daniel Stenberg via curl-users wrote:
> On Wed, 9 Jul 2025, Dick Brooks wrote:
> > Congratulations. Any chance we will see an SBOM for curl in the future?
>
> The "normal" curl release does not need an SBOM. It is just one thing and
> this one thing comes
On Wed, 9 Jul 2025, Dick Brooks wrote:
Congratulations. Any chance we will see an SBOM for curl in the future?
The "normal" curl release does not need an SBOM. It is just one thing and this
one thing comes only from us: the curl release.
curl releases are done as source code tarballs with n
Daniel,
Congratulations. Any chance we will see an SBOM for curl in the future?
Thanks,
Dick Brooks
Active Member of the CISA Critical Manufacturing Sector,
Sector Coordinating Council - A Public-Private Partnership
Never trust software, always verify and report! T
Risk always exists, but
Hello,
The third and last release candidate of the coming curl 8.15.0 release is now
uploaded and available for testing on https://curl.se/rc/.
Please take this one for a spin and verify that everything seems to work as they
should. All the new features for the pending release have been merged