Implement a tool comparing two repository states (CVE/SBOM)

Value

Description

Implement a tool comparing two package lists (SBOM or CVE output) to give a list of new/updated packages and CVEs.

In scope

Compare result files

Out of Scope

Updating the system Generating the SBOM/CVE list

Acceptance Criteria

The tool allows to compare two repositories/states

Applicable Market Segments

• All
• Wearables
• Smart Appliances
• Energy Management
• Security
• Entertainment
• Home Automation
• Lighting

Applicable Personas

• Product Integrator
• Software Quality Auditor
• License Compliance Auditor

added to epic &8

changed milestone to %goofy alpha

set weight to 10

added teamsecurity label

changed epic to &101 (closed)

changed milestone to %goofy beta

changed iteration to Oniro Core Iterations Jun 1, 2022 - Jun 30, 2022

added Doing label

marked this issue as related to #57

changed title from Implement a tool comparing two SBOM outputs to Implement a tool comparing two repository states (CVE/SBOM)

changed the description

Initial MR: !163 (merged)

closed

removed Doing label