I would like to see if anyone has a way to be able to read off of a component's repository's Dockerfile so that we are able to make scorecards out of it? I want to make a goal of making sure a package in Docker is kept up to date, similar to how NPM is getting tracked. Thanks in advance!
Have you found a solution for this by any chance? As you've noticed, only npm is supported when it comes to managing package dependencies.
You can maybe use the Package Dependencies REST API to manually populate package dependency information for components, which could potentially include data extracted from Dockerfiles if you automate that process outside of Compass 👀
Cheers, Tobi
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.