Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

have a .phar released #164

Open
jkowalleck opened this issue Dec 6, 2021 · 7 comments
Open

have a .phar released #164

jkowalleck opened this issue Dec 6, 2021 · 7 comments
Labels
help wanted Extra attention is needed idea

Comments

@jkowalleck
Copy link
Member

jkowalleck commented Dec 6, 2021 •
edited

Is your feature request related to a problem? Please describe.

on CI, i always need to have a php composer available in order to create an SBOM of a composer.lock

Describe the solution you'd like

have a bundled .phar added to every release, that includes composer & the CDX composer plugin

Additional context

acc / crit

  • phar includes a version of php composer & CDX plugin
  • phar bundles pinned versions of all dependencies
    • lock file in the repo
    • add SBOM to PHAR for to know what is in it
  • building PHAR is automated part of very release
  • CI tests to build PHAR and execute integration/demos on every CT run
  • IDEA: https://github.com/humbug/php-scoper is part of build process
@jkowalleck jkowalleck added the enhancement New feature or request label Dec 6, 2021
@jkowalleck jkowalleck added the help wanted Extra attention is needed label Mar 17, 2022
@jkowalleck jkowalleck added idea and removed help wanted Extra attention is needed enhancement New feature or request labels Oct 10, 2022
@jkowalleck jkowalleck added the help wanted Extra attention is needed label Feb 3, 2023
@jkowalleck
Copy link
Member Author

maybe utilize https://github.com/box-project/box ?

@llaville

This comment was marked as off-topic.

Sign in to view
@llaville

This comment was marked as off-topic.

Sign in to view
@jkowalleck

This comment was marked as off-topic.

Sign in to view
@llaville

This comment was marked as off-topic.

Sign in to view
@theofidry

This comment was marked as off-topic.

Sign in to view
@jkowalleck

This comment was marked as off-topic.

Sign in to view
@jkowalleck jkowalleck mentioned this issue Oct 25, 2023
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
help wanted Extra attention is needed idea
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@llaville @jkowalleck @theofidry