Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sbom support #3954

Merged
merged 1 commit into from Nov 14, 2023
Merged

sbom support #3954

merged 1 commit into from Nov 14, 2023

Conversation

deitch
Copy link
Collaborator

@deitch deitch commented Nov 9, 2023

- What I did

Add support for:

  • using buildkit's SBoM scanner when running lkt pkg build, so that they are on the OCI image
  • consolidating SBoMs from individual OCI images into a single one when running lkt build

Of course with CLI flags to enable/disable/control, and documentation.

While I was at it:

  • fixed a bug in dockerRun()
  • fixed some minor linting issues
  • upgraded the default buildkit builder container version from v0.11.0-rc2 to v0.12.3

- How I did it

Wrote documents, changed code.

- How to verify it

If CI passes, it works. I tested lots of different scenarios as well.

Test added to ensure the SBoM is in place

- Description for the changelog

Support for SBoMs in packages and in final image version

@deitch deitch force-pushed the sbom-inheritor branch 10 times, most recently from b5bf055 to 197a903 Compare November 10, 2023 10:40
Signed-off-by: Avi Deitcher <avi@deitcher.net>
@deitch deitch merged commit bbd9b85 into linuxkit:master Nov 14, 2023
22 checks passed
@deitch deitch deleted the sbom-inheritor branch November 14, 2023 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant