Observed since 21 Oct, 09:07 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
Bill Of Materials Management for Future Agile CICD
Python 3.8+ project to manage AgileUP pipeline bill-of-materials with the following features:
This project uses poetry is a tool for dependency management and packaging in Python. It allows you to declare the libraries your project depends on, it will manage (install/update) them for you.
Use the installer rather than pip installing-with-the-official-installer.
poetry self add poetry-bumpversion
poetry -V
Poetry (version 1.2.0)
Install poetry from powershell in admin mode.
(Invoke-WebRequest -Uri https://install.python-poetry.org -UseBasicParsing).Content | py -
The path will be C:\Users\<YOURUSER>\AppData\Roaming\Python\Scripts\poetry.exe which will will need to add to your system path.
When using gitbash you can setup an alias for the poetry command:
alias poetry="\"C:\Users\<YOURUSER>\AppData\Roaming\Python\Scripts\poetry.exe\""
poetry update
poetry install
poetry run agileupbom
poetry run flake8
poetry run pytest
export PYPI_USERNAME=__token__
export PYPI_PASSWORD=<Your API Token>
poetry publish --build --username $PYPI_USERNAME --password $PYPI_PASSWORD
We use SemVer for versioning. For the versions available, see the tags on this repository.
We are using poetry-bumpversion to manage release versions.
poetry version patch
Once the release has been created it is now available for you to use in other python projects via:
pip install agileupbom
And also for poetry projects via:
poetry add agileupbom
Please read CONTRIBUTING.md for details on our code of conduct, and the process for submitting pull requests to us.
This project is licensed under the Apache License, Version 2.0 - see the LICENSE file for details
Download counts and popularity will appear here as the collector receives them.
| Version | Published | Direct dependencies | Open version |
|---|---|---|---|
| 0.0.12 | 26 Sept 2022 | 4 |
This describes our collected data; it is not a security assessment.
Shared repository data · GitHub
Observed since 21 Oct, 09:07 UTC
No superseded metadata states collected. Unchanged observations do not create new revisions.
package:571757ee05d69c9c445cca4f6fdf6d2c9564b2c4803c3a77f4d31eb7edd5bc03