Skip to content

Commit f2c1f57

Browse files
committed
add link to datadog-ci readme for sbom generation
1 parent ea3686c commit f2c1f57

File tree

1 file changed

+8
-1
lines changed
  • content/en/security/code_security/software_composition_analysis/setup_static

1 file changed

+8
-1
lines changed

content/en/security/code_security/software_composition_analysis/setup_static/_index.md

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -270,13 +270,20 @@ You can upload SBOMs generated by other tools if they meet these requirements:
270270

271271
Third-party SBOM files are uploaded to Datadog using the [`datadog-ci`](https://github.com/DataDog/datadog-ci/?tab=readme-ov-file#how-to-install-the-cli) command.
272272

273+
You can find optional arguments and other information in the `datadog-ci` [README][22].
274+
273275
You can use the following command to upload your third-party SBOM. Ensure the environment variables `DD_API_KEY`, `DD_APP_KEY`, and `DD_SITE`
274276
are set to your API key, APP key, and [Datadog site][12], respectively.
275277

276278
```bash
277279
datadog-ci sbom upload /path/to/third-party-sbom.json
278280
```
279281

282+
<div class="alert alert-info">
283+
If you already have automatic scanning enabled for a repository, a manual upload will replace any existing result for that commit.
284+
</div>
285+
286+
280287
## Link results to Datadog services and teams
281288

282289
### Link results to services
@@ -431,4 +438,4 @@ Datadog stores findings in accordance with our [Data Rentention Periods](https:/
431438
[19]: https://cyclonedx.org/docs/1.5/json/
432439
[20]: https://cyclonedx.org/docs/1.6/json/
433440
[21]: https://docs.github.com/en/repositories/working-with-files/managing-large-files/about-git-large-file-storage
434-
441+
[22]: https://github.com/DataDog/datadog-ci/tree/master/packages/plugin-sbom

0 commit comments

Comments
 (0)