Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE]: Add component types to better support container orchestration environments #577

Open
Yaytay opened this issue Jan 17, 2025 · 3 comments

Comments

@Yaytay
Copy link

Yaytay commented Jan 17, 2025

The list of valid component types is rather limited and this makes tools such as Dependency Track less useful when trying to work with container orchestration environments - essentially everything has to be either Application or Container.

I would like to propose:

  • Cluster
    A collection of components that function together as a unit.

    For my purposes this would be either a Kubernetes or Swarm cluster, but it would serve equally in other situations.
    "Environment" would work as well as "Cluster", but I think "Cluster" is more generically useful.

  • Service
    An abstract grouping of software components that provides some kind of end point for use by other components.

@jkowalleck
Copy link
Member

jkowalleck commented Jan 17, 2025

FYI:

for these purposes, several properties are registered:

for these purposes, the community tried to consolidate - see CycloneDX/cyclonedx-property-taxonomy#59

@Yaytay
Copy link
Author

Yaytay commented Jan 21, 2025

@jkowalleck,
The problem with properties is that, whilst they do capture the data, there aren't many tools that know what to do with them.
In particular Dependency Track is not going to let me filter by properties, which is pretty fundamental when working with component types.

@jkowalleck
Copy link
Member

jkowalleck commented Jan 21, 2025

The problem with properties is that, whilst they do capture the data, there aren't many tools that know what to do with them.

I see.
You should raise tickets to tool manufacturers, let them know which features you really need and why. (see for example: DependencyTrack/dependency-track#2614)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants