RootCauseunvalidated
They can contain multiple technologies - nodejs, python, Go, etc. — Even one repository can contain more dependency lock files. Tension: I want to generate SBOM and upload it to Dependency track. I would love to have one approach for all repositories I want to track. Outcome: you have to design your own strategy that fits your unique project architecture.
ae430981-ca8f-4801-9336-d14cb2d0a17b
They can contain multiple technologies - nodejs, python, Go, etc. — Even one repository can contain more dependency lock files. Tension: I want to generate SBOM and upload it to Dependency track. I would love to have one approach for all repositories I want to track. Outcome: you have to design your own strategy that fits your unique project architecture.