It's perfect if we can run it on your OpenShift, and only maintain the application itself without having to also maintain OpenShift. We run it on PSI OpenShift Red Hat infrastructure inside the Red Hat firewall for now. We're planning on migrating to Managed Platform Plus before GA in Sept.

You can found the source code here:

   https://github.com/RedHatProductSecurity/component-registry/

Our current setup in PSI has:


We don't have any client tooling yet. Our application hosts an API endpoint, which you can get a preview of by visiting this if you're a Red Hat employee:

   https://corgi.prodsec.redhat.com/api/v1/

We're planning to produce SPDX documents for now, here's a sample for RHEL-8 if you're a Red Hat employee:

  https://corgi.prodsec.redhat.com/api/v1/product_streams/3264efff-4d6a-4fee-8278-6c904d5f80e8/manifest

Regards,
Jason

On Tue, Jul 12, 2022 at 4:41 AM Kevin Fenzi <kevin@scrye.com> wrote:
On Mon, Jul 11, 2022 at 09:22:48AM -0400, Frank Ch. Eigler wrote:
> Hi -
>
> > [...] Let me know your thoughts. I didn't provide a link to the code
> > repository as it's currently private to Red Hat associates. But we
> > expect to opensource the project in the coming weeks. At that time
> > we'll be able to provide the source code. [...]
>
> I suspect your message is hard to answer substantively without any
> information about the scale and composition of this infrastructure,
> its needed inputs, resources, usefulness (in terms of client tooling),
> and so on.

Yeah. Once the open sourcing happens, perhaps we could get a overview of
how it works, what it needs, etc.

kevin
_______________________________________________
infrastructure mailing list -- infrastructure@lists.fedoraproject.org
To unsubscribe send an email to infrastructure-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/infrastructure@lists.fedoraproject.org
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure