Merge pull request #510 from ejarocki-cloudlinux/master

Add SBOM section to JS pages

Author: sboldyreva

docs/.vuepress/routes.json

@@ -122,9 +122,9 @@
     "/els-for-os/red-hat-enterprise-linux-7-els/#removing-the-els-repository": "/els-for-os/managing-els-repository/#removing-the-els-repository",
     "/els-for-os/ubuntu-16-04-els/#removing-the-els-repository": "/els-for-os/managing-els-repository/#removing-the-els-repository",
     "/els-for-os/ubuntu-18-04-els/#removing-the-els-repository": "/els-for-os/managing-els-repository/#removing-the-els-repository",
-    "/els-for-runtimes-and-libraries/angular/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/angular/#step-1-get-token",
-    "/els-for-runtimes-and-libraries/angularjs/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/angularjs/#step-1-get-token",
-    "/els-for-runtimes-and-libraries/lodash/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/lodash/#step-1-get-token",
+    "/els-for-runtimes-and-libraries/angular/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/angular/#step-1:-get-token",
+    "/els-for-runtimes-and-libraries/angularjs/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/angularjs/#step-1:-get-token",
+    "/els-for-runtimes-and-libraries/lodash/#step-1-get-user-credentials": "/els-for-runtimes-and-libraries/lodash/#step-1:-get-token",
     "/els-for-runtimes-and-libraries/spring/#overview": "/els-for-runtimes-and-libraries/spring/#step-2-configure-registry",
     "/els-for-runtimes-and-libraries/spring/#step-2-create-or-modify-your-build-tool-settings": "/els-for-runtimes-and-libraries/spring/#step-4-verify-and-build",
     "/els-for-runtimes-and-libraries/spring/#verification": "/els-for-runtimes-and-libraries/spring/#step-4-verify-and-build",

docs/els-for-libraries/angular/README.md

@@ -858,6 +858,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for Angular ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for Angular here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:angular](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:angular)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/angularjs/README.md

@@ -157,6 +157,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for AngularJS ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/angular/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/angular/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for AngularJS here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:angularjs](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:angularjs)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/bootstrap-sass/README.md

@@ -116,6 +116,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for bootstrap-sass ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/bootstrap-sass/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/bootstrap-sass/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for bootstrap-sass here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:bootstrap-sass](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:bootstrap-sass)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/bootstrap/README.md

@@ -163,6 +163,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for Bootstrap ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/bootstrap/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/bootstrap/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for Bootstrap here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:bootstrap](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:bootstrap)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/ember/README.md

@@ -274,6 +274,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare publishes VEX data for JavaScript ELS packages, including the **transitive** dependencies patched for Ember.js. The index is at [https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for Ember.js here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:ember](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:ember)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/express/README.md

@@ -116,6 +116,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for express ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/express/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/express/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for express here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:express](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:express)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/fastify/README.md

@@ -137,6 +137,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for fastify ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/fastify/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/fastify/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for fastify here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:fastify](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:fastify)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/javascript-libraries/README.md

@@ -210,6 +210,16 @@ VEX is a machine-readable format that tells you if a known vulnerability is actu
 
 TuxCare provides VEX for JavaScript Libraries ELS versions: [security.tuxcare.com/vex/cyclonedx/els_lang_javascript/](https://security.tuxcare.com/vex/cyclonedx/els_lang_javascript/).
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for ELS JavaScript packages in the `els-js-sbom` repository:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command:

docs/els-for-libraries/jquery-ui/README.md

@@ -110,6 +110,16 @@ TuxCare provides ELS for jQuery UI as an NPM package, hosted on a secure interna
 
 The `npm` tool should be able to identify and resolve dependencies from the TuxCare ELS for jQuery UI repository.
 
+## Software Bill of Materials (SBOM)
+
+For each published ELS package and version, TuxCare generates SBOM files. Those artifacts are published to TuxCare Nexus.
+
+You can browse SBOM files for jQuery UI here:
+
+[https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:jquery-ui](https://nexus.repo.tuxcare.com/#browse/browse:els-js-sbom:jquery-ui)
+
+Use the credentials you received for TuxCare ELS ([Step 1: Get Token](#step-1:-get-token)) to access Nexus.
+
 ## How to Upgrade to a Newer Version of TuxCare Packages
 
 If you have already installed a package with a `tuxcare.1` suffix and want to upgrade to a newer release (for example, `tuxcare.3`), remove node_modules, clear the npm cache to avoid conflicts, and then run the installation command: