Скачать или смотреть Use Github Actions to generate an Android SBOM every time you build your app

Technical blog: https://www.andrewhoog.com/post/how-t...

Developers increasing need to generate SBOMs to improve an app's security posture and to comply to new regulator requirement. However, generating an SBOM can be challenging, especially for mobile apps. This is where NowSecure's binary analysis + GitHub Actions can be leveraged to automated the generation of an Android SBOM every time you build your app. This technical tutorial will walk you through the steps to complete this using the open source K-9 Mail app as an example.

00:00 - Intro
01:02 - NowSecure free SBOM trial
01:30 - Code setup (local)
02:03 - Enable GitHub Dependency Graph for the repo
02:45 - Clone the forked repo
03:19 - [Optional] Build app locally
03:33 - K-9 Mail build dependencies
05:04 - Configure NowSecure Mobile SBOM Action
05:32 - Configure GitHub Action secrets
06:37 - Configure GitHub Action workflow
09:03 - Why gradle-wrapper-validation is critical and amazing!
12:48 - Run GitHub Action
13:43 - Review GitHub Action status
13:57 - NowSecure dynamic analysis process
14:37 - View SBOM results in GitHub Dependency Graph
15:29 - Wrap up

::::::::::::::::::::
Music: Fire - Elektronomia
Video: https://www.youtube.com/watch?v=mX-Sk...
Support by RFM - NCM:    • Fire - Elektronomia | Royalty Free Music -...  
::::::::::::::::::::

TALK TO OR FOLLOW ME:
LinkedIn:   / andrewhoog  
Twitter:   / ahoog42  
Website: https://www.andrewhoog.com
Company Website: https://www.nowsecure.com