Skip to content
This repository was archived by the owner on Nov 5, 2024. It is now read-only.

Commit c73419e

Browse files
author
Christian Sears
committed
Updates SBOM UI proc and SLSA con
1 parent 632d0a4 commit c73419e

File tree

2 files changed

+4
-6
lines changed

2 files changed

+4
-6
lines changed

docs/modules/ROOT/pages/concepts/slsa/con_slsa-conformity.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -7,8 +7,8 @@ Supply-chain Levels for Software Artifacts (SLSA) is a security framework produc
77

88
SLSA assigns two primary responsibilities to build platforms like {ProductName}:
99

10-
* Provenance to describe how the platform built each software artifact
11-
* Build isolation to prevent tampering with the build process
10+
* *Provenance* to describe how the platform built each software artifact
11+
* *Build isolation* to prevent tampering with the build process
1212

1313
SLSA also includes three Build Levels, which provide you with increasing guarantees about how build platforms fulfill these responsibilities. Any build platform that generates provenance conforms to the SLSA framework’s Build Level 1 (L1) specifications. Build platforms produce artifacts with higher Build Levels by hardening provenance against forgery and by isolating the build process. As of the v1.0 specification, Build Level 3 (L3) is the highest Build Level. {ProductName} produces Build L3 artifacts.
1414

docs/modules/ROOT/pages/how-to-guides/Secure-your-supply-chain/proc_inspect_sbom.adoc

Lines changed: 2 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ A software bill of materials (SBOM) provides greater transparency for your softw
55

66
You can use an SBOM to better understand the composition of your software, identify vulnerabilities, and assess the potential impact of any security issues that may arise. Also, to comply with cybersecurity regulations, you might need to provide your customers with the SBOM for your application's components.
77

8-
== Downloading an SBOM in the web UI
8+
== Viewing an SBOM in the web UI
99

1010
.Prerequisites
1111

@@ -19,9 +19,7 @@ In the console, complete the following steps to download the SBOM for a componen
1919

2020
. For the component whose SBOM you want to view, select its most recent pipeline run.
2121

22-
. From the *Pipeline run details* page, select the *Logs* tab.
23-
24-
. In the navigation bar, select *show-sbom*.
22+
. On the *Pipeline run details* page, select *View SBOM*.
2523
.. You can use your web browser to immediately search the SBOM for terms that indicate vulnerabilities in your software supply chain. For example, try searching for "log4j".
2624
.. You can select *Download* to download the SBOM, or *Expand* to view it full-screen.
2725

0 commit comments

Comments
 (0)