Skip to content

feat: integrate SBOM supply chain security panel into enterprise secu… - #563

Merged
kRamu81 merged 4 commits into
kRamu81:mainfrom
dipanshubatra:feature/sbom-supply-chain-security-subsystem
Jul 29, 2026
Merged

feat: integrate SBOM supply chain security panel into enterprise secu…#563
kRamu81 merged 4 commits into
kRamu81:mainfrom
dipanshubatra:feature/sbom-supply-chain-security-subsystem

Conversation

@dipanshubatra

Copy link
Copy Markdown
Contributor

Description

Integrates the existing Software Bill of Materials (SBOM) & Supply Chain Security subsystem into the Enterprise Security Center, providing centralized access to software inventory management, dependency analysis, and supply chain security controls.

The implementation imports the SbomPanel component, adds a dedicated SBOM & Supply Chain navigation tab, and conditionally renders the panel within the Enterprise Security Center, allowing administrators to monitor software components, verify build attestations, and manage supply chain compliance from a unified security dashboard.

Fixes # (issue)


Type of change

  • Bug fix (non-breaking change which fixes an issue)
  • Enhancement (non-breaking improvement to existing functionality)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • This change requires a documentation update

Checklist

  • My code follows the style guidelines of this project
  • I have performed a self-review of my code
  • I have verified the SBOM panel renders correctly within the Enterprise Security Center
  • My changes generate no new warnings
  • Existing functionality continues to operate correctly after integration
  • Manual testing completed for navigation and conditional rendering
  • Documentation updates will be completed separately if required

#Closed #562


Summary by CodeRabbit

Enhancements

  • Integrated the Software Bill of Materials (SBOM) & Supply Chain Security panel into the Enterprise Security Center.
  • Added a dedicated SBOM & Supply Chain navigation tab for centralized software supply chain management.
  • Embedded the SbomPanel within the enterprise security dashboard using conditional rendering.
  • Streamlined administrator access to software inventory, dependency analysis, and build attestation management.

Supply Chain Security

  • Centralized SBOM operations within the Enterprise Security Center.
  • Improved visibility into CycloneDX 1.5 software inventories and dependency catalogues.
  • Enhanced software governance with prohibited licence enforcement and SHA-256 build attestation verification.
  • Simplified DevSecOps workflows by consolidating supply chain security capabilities into the central enterprise security hub.

Technical Improvements

  • Added the SbomPanel command center supporting CycloneDX 1.5, dependency cataloguing, licence compliance, and build attestation verification.
  • Imported the SbomPanel component into EnterpriseSecurityCenter.jsx.
  • Added the sbom navigation tab and configured conditional rendering for the integrated panel.
  • Preserved existing Enterprise Security Center functionality while extending centralized software supply chain security management.

@coderabbitai

coderabbitai Bot commented Jul 29, 2026

Copy link
Copy Markdown

Warning

Review limit reached

@kRamu81, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 55 minutes

Enable usage-based reviews in Billing to review now. Otherwise, wait until the next included review is available.
You're only billed for reviews past your plan's rate limits ($0.25/file).

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6be43b23-0a73-44a7-a707-23cc60a716db

📥 Commits

Reviewing files that changed from the base of the PR and between 8847c3c and ffa4ee7.

📒 Files selected for processing (2)
  • src/components/auth/SbomPanel.jsx
  • src/services/SbomService.js

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions github-actions Bot added ECSoC26 ECSoC 2026 Initiative Frontend Frontend related changes labels Jul 29, 2026
@kRamu81
kRamu81 merged commit 8da50b2 into kRamu81:main Jul 29, 2026
5 of 8 checks passed
@ecsoc-sentinel ecsoc-sentinel Bot added the ECSoC26-L2 Difficulty Level 2 - Medium label Jul 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ECSoC26-L2 Difficulty Level 2 - Medium ECSoC26 ECSoC 2026 Initiative Frontend Frontend related changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[FEATURE] Integrate Software Bill of Materials (SBOM) & Supply Chain Security panel into Enterprise Security Center

2 participants