-
Notifications
You must be signed in to change notification settings - Fork 83
Open
Labels
Description
Currently, baselibs module depends on the upstream nlohmann_json module from BCR: https://github.com/eclipse-score/baselibs/blob/v0.2.2/MODULE.bazel#L129
The Trustable Software Framework requires that all source code is mirrored to a controlled environment:
https://codethinklabs.gitlab.io/trustable/trustable/doorstop/TA.html#ta-supply_chain
And therefore, the baselibs module should use the approved version and not from BCR.
This task includes:
- Renaming
inc_nlohmann_jsontonlohmann_json. It is agreed in https://github.com/orgs/eclipse-score/discussions/434?sort=new#discussioncomment-15473384
Example how to do it: Rename inc_mw_per repo to persistency .eclipsefdn#88
PR: Rename inc_nlohmann_json repo to nlohmann_json .eclipsefdn#127 - Adding the
nlohmann_jsonto the S-CORE bazel registry. The module name should be prefixed withscore_. I.e.score_nlohmann_json. Enable automatic version update if needed. - Changing the dependency in https://github.com/eclipse-score/baselibs/blob/main/MODULE.bazel to point to the S-CORE bazel registry.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
Backlog
Status
In Progress