https://community.fabric.microsoft.com/t5/Developer/Does-it-make-sense-try-to-make-a-SBOM-file-for-Power-BI-Custom/m-p/3758889#M50368 <LI-CODE lang="markup">At least with my knowledge, I don't know if you can do something "harmful" using Power Query M language in terms of using the language.</LI-CODE> <P>Unfortunately, that is possible. Depending on the scope of the credentials used in the connector your native query can include insert/delete/update etc statements affecting your data source. Power Query can also run Python and R scripts that can equally contain destructive payloads.</P> Tue, 12 Mar 2024 20:29:01 GMT lbendlin 2024-03-12T20:29:01Z https://community.fabric.microsoft.com/t5/Developer/Does-it-make-sense-try-to-make-a-SBOM-file-for-Power-BI-Custom/m-p/3756468#M50327 <P>I'm, making a custom connector for the company I work for, but based on the DevOps and TI deparments, If I want share the connector be used in the company I must meet certain requeriments and one of the is a SBOM file to determinate everything is ok.<BR /><BR />But is it possible or makes sense generate a SBOM file for a custom connector?, TBH, I don't know if is possible or makes sense, having in mind that:</P><UL><LI>You can see the source code of custom and certified connectors just unzipping the .mez/.pqx file.</LI><LI>The connector needs Power BI Desktop to be used or perform something.&nbsp;</LI><LI>At least with my knowledge, I don't know if you can do something "harmful" using Power Query M language in terms of using the language.</LI><LI>I cannot think in any dependency for the connector.&nbsp;</LI></UL><P>Besides that, is there a way of do the SBOM file for a custom connector?&nbsp;</P> Tue, 12 Mar 2024 00:16:19 GMT https://community.fabric.microsoft.com/t5/Developer/Does-it-make-sense-try-to-make-a-SBOM-file-for-Power-BI-Custom/m-p/3756468#M50327 ECorona 2024-03-12T00:16:19Z https://community.fabric.microsoft.com/t5/Developer/Does-it-make-sense-try-to-make-a-SBOM-file-for-Power-BI-Custom/m-p/3758889#M50368 <LI-CODE lang="markup">At least with my knowledge, I don't know if you can do something "harmful" using Power Query M language in terms of using the language.</LI-CODE> <P>Unfortunately, that is possible. Depending on the scope of the credentials used in the connector your native query can include insert/delete/update etc statements affecting your data source. Power Query can also run Python and R scripts that can equally contain destructive payloads.</P> Tue, 12 Mar 2024 20:29:01 GMT https://community.fabric.microsoft.com/t5/Developer/Does-it-make-sense-try-to-make-a-SBOM-file-for-Power-BI-Custom/m-p/3758889#M50368 lbendlin 2024-03-12T20:29:01Z