I'm, making a custom connector for the company I work for, but based on the DevOps and TI deparments, If I want share the connector be used in the company I must meet certain requeriments and one of the is a SBOM file to determinate everything is ok.
But is it possible or makes sense generate a SBOM file for a custom connector?, TBH, I don't know if is possible or makes sense, having in mind that:
- You can see the source code of custom and certified connectors just unzipping the .mez/.pqx file.
- The connector needs Power BI Desktop to be used or perform something.
- At least with my knowledge, I don't know if you can do something "harmful" using Power Query M language in terms of using the language.
- I cannot think in any dependency for the connector.
Besides that, is there a way of do the SBOM file for a custom connector?