coulomb/repo-manager
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

refactor: delegate SBOM scans to Nexus

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028f0-a42f-7582-89a8-ebaad7343834
This commit is contained in:
tegwick 2026-08-22 20:22:45 +02:00
parent 6d57d1c1b2
commit ad0ba6f2ba
8 changed files with 277 additions and 428 deletions
Download patch file Download diff file Expand all files Collapse all files

7
workplans/RMGR-WP-0008-work-record-and-register-receiving-surface.md
View file

@ -197,6 +197,13 @@ would invert repository authority, so cutover rebuilds from source and retains
old snapshot identifiers only as retirement provenance. Evidence:
`docs/evidence/RMGR-WP-0008-sbom-cutover-2026-08-21.md`.
Authority correction (2026-08-22): SBOM Nexus is now the single scanner and
snapshot product owner. Repo Manager's duplicate parser module was removed;
the existing `rmgr sbom scan|licence-report` commands remain only as thin,
deprecated delegates to the `sbom-nexus` executable and identify Nexus as the
owner in their JSON. Evidence:
`docs/evidence/RMGR-WP-0008-sbom-authority-handoff-2026-08-22.md`.
## Topic and classification contract
```task