Skip to content

[K9VULN-9613] Add target framework scope properties#2068

Merged
piloulacdog merged 2 commits intomasterfrom
pierrelouis.lacorte/K9VULN-9613-report-target-framework
Feb 5, 2026
Merged

[K9VULN-9613] Add target framework scope properties#2068
piloulacdog merged 2 commits intomasterfrom
pierrelouis.lacorte/K9VULN-9613-report-target-framework

Conversation

@piloulacdog
Copy link
Contributor

@piloulacdog piloulacdog commented Jan 21, 2026

🚀 Motivation

Modern .NET projects commonly use multi-targeting, where different versions of dependencies are required for different target frameworks (e.g., net6.0, net7.0, net8.0). Currently, there is no way to represent or filter this framework-specific dependency information in SBOMs, making it difficult to accurately track which dependencies apply to which runtime environments.

📝 Summary

This PR adds support for storing target framework information in SBOM component properties using the datadog:target-framework property key. The implementation:

🧪 Testing

  • New tests were added for new logic.
  • Existing tests were updated for new logic, and not only so that they pass!
  • Benchmark results prove that performance is the same or better.

🆘 Recovery

Notes for on-call - select only one:

  • The change can be rolled back.
  • Do not roll back. Why?:

@piloulacdog piloulacdog added the static-analysis Related to [sarif, sbom] label Jan 21, 2026
@piloulacdog piloulacdog marked this pull request as ready for review January 21, 2026 15:58
@piloulacdog piloulacdog requested review from a team as code owners January 21, 2026 15:58
Copy link
Contributor

@Drarig29 Drarig29 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM (I re-triggered the mergegate)

@piloulacdog piloulacdog merged commit 4e23d29 into master Feb 5, 2026
26 of 27 checks passed
@piloulacdog piloulacdog deleted the pierrelouis.lacorte/K9VULN-9613-report-target-framework branch February 5, 2026 10:07
@piloulacdog piloulacdog mentioned this pull request Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

static-analysis Related to [sarif, sbom]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants