Skip to content

docs(supply-chain): condense the guide to essentials#263

Merged
haksungjang merged 1 commit into
masterfrom
docs/supply-chain-condense
Jul 13, 2026
Merged

docs(supply-chain): condense the guide to essentials#263
haksungjang merged 1 commit into
masterfrom
docs/supply-chain-condense

Conversation

@haksungjang

Copy link
Copy Markdown
Member

공급망 보안 가이드 전체(ko/en 22개 파일)를 핵심 위주로 축약합니다. 내용마다 정본 페이지를 정하고(요구사항 → requirements, 반려 사례 → rejection-reasons, 확인 명령 → checklist, 정책 → policy) 다른 페이지의 중복은 링크로 대체합니다.

  • SBOM 표준: 235줄 → 68줄. 결론 alert + 비교표 + 상호 변환만 유지
  • SBOM 개념: 구성 요소 절 압축, CPE·규제 나열 삭제
  • 공급망 보안이란?: 공격 사례 2건 각 1문장으로 축약
  • 규제 동향: 중복 불릿 병합, SKT 대응 절을 policy 링크로 대체
  • 제출 요구사항: 버전 필수 3회 반복 → 1회, purl 타입 표 흡수, 샘플 JSON 정리
  • 서버 SBOM·제출 절차·체크리스트·공급사 인덱스: 페이지 내 반복 제거
  • SBOM 인덱스: 사내 활용 흐름인 라이프사이클 다이어그램 삭제

반려 방지 경고, 필수 요구사항, 명령어 예시, 연락처는 모두 유지. 합계 675줄 삭제 / 78줄 추가.

확인

  • ko-style 린트 0건, dev 서버에서 전체 페이지 렌더링 확인

Designate one canonical page per topic and replace repeats with links:
requirements for mandatory fields and purl rules, rejection-reasons for
real rejection cases, checklist for verification commands, policy for
SKT requirements.

- standards: keep the takeaway alert, comparison table, and conversion
  commands; drop duplicated JSON samples, pros/cons, selection guide
- what-is-sbom: compress the components section, drop CPE and the
  regulation list; keep the dependency diagram and references
- overview: two attack cases in one sentence each, merge the rationale
  bullets; keep the attack-flow diagram
- regulations: merge duplicate EO bullets, drop the consumer role and
  the SKT response section (link to policy instead)
- requirements: state the version rule and purl type rule once each,
  drop the ASCII tree and fix the broken sample JSON
- server-delivery: explain the static-link blind spot once
- submission: merge the doubled heading, absorb the TOSCA section
- checklist: replace duplicated quotes with rejection-reasons links
- for-suppliers index: drop the guide-structure list duplicating the
  quick start
- sbom index: drop the internal lifecycle diagram
@haksungjang haksungjang merged commit 08c4796 into master Jul 13, 2026
3 checks passed
@haksungjang haksungjang deleted the docs/supply-chain-condense branch July 13, 2026 06:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant