Skip to content

refactor(sbom): upload sbom in deploy job to support environment url as version

Michael requested to merge refactor/sbom-dt-version-env-urls into main

Part of #25 (closed)

For clarity it was requested that the environment URL should be used as the version in Dependency Track (DT).

When a deployment is no longer active it should be disabled in DT. Due to GitLab limtations there can't be two stop jobs for the same environment. So we have to do the DT uploading and disabling directly in the deploy start/stop jobs.

Edited by Michael

Merge request reports