John T. Myers 169655a0d8 feat(sbom): add SBOM generation, license resolution, and CSV export tooling (#239) ...

* feat(sbom): add SBOM generation, license resolution, and CSV export tooling

Add mise-integrated SBOM pipeline for container images using Syft.
Includes license resolution via crates.io/npm/PyPI APIs and CycloneDX
JSON to CSV conversion. Adds agent skill for on-demand SBOM operations.

Closes #237

* fix(sbom): chain task dependencies to run generate → resolve → csv sequentially

* fix(sbom): add concurrent license resolution, progress logging, and exclude dev artifacts

* feat(notices): add mise run notices to generate THIRD-PARTY-NOTICES with full license texts

Use cargo-about for Rust crate licenses and pip-licenses for Python
packages. Produces a single attribution file with per-package copyright
notices and full license text for open-source compliance.

2026-03-11 15:34:00 -07:00

..

resolve_licenses.py

feat(sbom): add SBOM generation, license resolution, and CSV export tooling (#239)

2026-03-11 15:34:00 -07:00

sbom_to_csv.py

feat(sbom): add SBOM generation, license resolution, and CSV export tooling (#239)

2026-03-11 15:34:00 -07:00