chore: add sales-demo-mini dataset for fast-loading demos

etc/datasets/Makefile

@@ -1,5 +1,5 @@
 .PHONY: all
-all: ds1.zip ds3.zip
+all: ds1.zip ds3.zip sales-demo.zip sales-demo-mini.zip
 
 .PHONY: ds1.zip
 ds1.zip:
@@ -16,6 +16,16 @@ ds3-sboms.zip:
 	-rm ds3-sbom.zip
 	cd ds3 && zip -r ../ds3-sboms.zip ./spdx
 
+.PHONY: sales-demo.zip
+sales-demo.zip:
+	-rm sales-demo.zip
+	cd sales-demo && zip -r ../sales-demo.zip . -x '*.DS_Store' -x 'download.sh' -x 'fetch-vulns.sh' -x 'sbom-list.txt'
+
+.PHONY: sales-demo-mini.zip
+sales-demo-mini.zip:
+	-rm sales-demo-mini.zip
+	cd sales-demo-mini && zip -r ../sales-demo-mini.zip . -x '*.DS_Store'
+
 TRUSTIFY_UI_REPO ?= https://github.com/trustification/trustify-ui.git
 TRUSTIFY_UI_BRANCH ?= main
 

etc/datasets/README.md

@@ -40,6 +40,29 @@ You can then upload it to the existing instance like
 http POST localhost:8080/api/v3/dataset @etc/datasets/ds3-sboms.zip
 ```
 
+## Sales Demo Mini
+
+A compact version of the Sales Demo dataset for fast-loading demos. 49 SBOMs
+(no large RHEL SBOMs), ~86 CSAF advisories, matching CVE and OSV records. ~95 MB total.
+
+Build the zip from the repo root:
+
+```shell
+make -C etc/datasets sales-demo-mini.zip
+```
+
+Upload to a running instance (pick one):
+
+```shell
+# HTTPie
+http POST localhost:8080/api/v3/dataset @etc/datasets/sales-demo-mini.zip
+
+# curl
+curl -X POST http://localhost:8080/api/v3/dataset \
+  -H 'Content-Type: application/zip' \
+  --data-binary @etc/datasets/sales-demo-mini.zip
+```
+
 ## DS4
 
 This dataset contains the following data:

etc/datasets/sales-demo-mini/README.md

@@ -0,0 +1,55 @@
+# Sales Demo Dataset (Compact)
+
+A compact demo dataset with 49 SBOMs and matching vulnerability data.
+Use this for fast ingestion during live demos.
+
+For the full dataset with RHEL SBOMs and broader advisory coverage, see `sales-demo/`.
+
+## Contents
+
+| Type | Count | Size |
+|------|-------|------|
+| SBOMs (SPDX, bz2) | 49 | ~57 MB |
+| CSAF/VEX advisories | ~86 | ~37 MB |
+| CVE records | ~52 | <1 MB |
+| OSV advisories | ~52 | <1 MB |
+
+**Total size:** ~95 MB
+
+## Products Covered
+
+### Core demo products
+- **RHTPA 3.0** — Trusted Profile Analyzer
+- **RHACS 4.10** — Advanced Cluster Security
+- **Quarkus 3.27 / 3.33** — Java framework
+- **Quay 3.18** — Container registry
+- **OpenShift GitOps 1.21** — Argo CD operator
+- **OpenShift Pipelines 1.15** — Tekton operator
+- **RHEL AI 3.4** — RHEL for AI workloads
+
+### Older versions for vulnerability comparison
+- **RHTPA 2.2**, **RHACS 4.9**, **Quay 3.9 / 3.10 / 3.12**
+- **GitOps 1.19 / 1.20**, **Pipelines 1.20 / 1.21**
+
+### Flagship Red Hat products
+- **OpenShift 4.12 / 4.16 / 4.18 / 4.22** — full platform lifecycle
+- **RHEL 7 ELS** — legacy with many CVEs
+- **Ansible Automation Platform 2.4 / 2.5 / 2.7**
+- **Ceph Storage 4 / 5.3 / 7.1 / 8.1** — storage lifecycle
+- **JBoss EAP 7.4 / 8.1**, **JWS 5 / 6** — middleware
+- **Red Hat Build of Keycloak 26.4 / 26.6** — identity
+- **RHTAS 1.3 / 1.4** — artifact signing
+- **CNV 4.12 / 4.16 / 4.20** — virtualization
+- **RHACM 2.11 / 2.14** — cluster management
+- **AMQ Broker 7.13 / 7.14** — messaging
+- **RHOAI 2.25 / 3.3** — AI/ML platform
+- **Satellite 6.16**, **Developer Hub 1.9**, **Logging 6.0**
+
+## Loading
+
+```shell
+pushd etc/datasets/sales-demo-mini
+zip -r ../sales-demo-mini.zip . -x '*.DS_Store'
+popd
+http POST localhost:8080/api/v3/dataset @etc/datasets/sales-demo-mini.zip
+```