Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Quick Start for Go #24

Open
goneall opened this issue Aug 7, 2023 · 3 comments
Open

Add Quick Start for Go #24

goneall opened this issue Aug 7, 2023 · 3 comments

Comments

@goneall
Copy link
Member

goneall commented Aug 7, 2023

In the outreach team meeting on 7 August, 2023 it was suggested we add a quick start guide for producing SPDX documents for Go projects

@goneall
Copy link
Member Author

goneall commented Aug 7, 2023

@puerco @nishakm @kzantow - is this something you could help with? See the quick start guide for context and info.

@kzantow
Copy link

kzantow commented Aug 7, 2023

I might be able to help with this, but I'm a little unclear what it would look like. I'm pretty sure Go builds don't have plugins like Maven or Gradle. This means someone would need to run some tool that understands Go projects, in which case I'd probably just suggest running Syft on the source code. If that makes sense, I could whip up an example along the lines of the Maven one.

@goneall
Copy link
Member Author

goneall commented Aug 7, 2023

... but I'm a little unclear what it would look like

Not being a GoLang person, I'm not clear either.

Having a Syft quick start does make sense.

I would encourage any tool provider that supports SPDX - open source or commercial - to add a quick start to the folder.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants