Skip to content

issues Search Results · repo:docker/buildkit-syft-scanner language:Go

Filter by

8 results
 (75 ms)

8 results

indocker/buildkit-syft-scanner (press backspace or delete to remove)

docker/buildkit-syft-scanner
Re-enable scanning for SBOM records in Docker image

In a slightly dated Docker Blog post, it was highlighted that you could add SBOM details for any binaries added manually to a Docker image: https://www.docker.com/blog/generate-sboms-with-buildkit/ This ...
kind/bug
  • nycnewman
  • 4
  • Opened 
    on Dec 4, 2024
  • #111

docker/buildkit-syft-scanner
Add option to specify SBOM format

Currently, buildkit-syft-scanner generates only SPDX-JSON SBOMs. Would the maintainers be open to supporting other types of SBOMs (e.g., CYCLONEDX-JSON)?
kind/enhancement
  • mqf20
  • 2
  • Opened 
    on Jul 9, 2024
  • #110

docker/buildkit-syft-scanner
Add Option to Specify Cataloger

I need a method to specify a cataloger using the buildkit For example, with Syft, I can specify a cataloger like this: syft image --select-catalogers +sbom-cataloger Currently, there is no way to add ...
kind/enhancement
  • alekseysavostin
  • 1
  • Opened 
    on Jun 26, 2024
  • #109

docker/buildkit-syft-scanner
Dependabot can't resolve github.com/anchore/syft anymore

Dependabot looks broken since https://github.com/docker/buildkit-syft-scanner/pull/79 image proxy | 2023/11/22 02:42:20 [460] 404 https://proxy.golang.org:443/github.com/anchore/syft/syft/formats/spdxjson/@v/list ...
kind/bug
  • crazy-max
  • 1
  • Opened 
    on Nov 22, 2023
  • #82

docker/buildkit-syft-scanner
sqlite driver is not available, newer RPM databases might not be cataloged

Related to https://github.com/docker/build-push-action/issues/972#issuecomment-1822799397 We need to register the sqlite driver for RPMDBs scan support with syft: https://github.com/anchore/syft/pull/1757#issuecomment-1520216430 ...
kind/enhancement
  • crazy-max
  • Opened 
    on Nov 22, 2023
  • #80

docker/buildkit-syft-scanner
Expand example tests to include common examples

Following up on #26, we should cover a wide variety of operating system images, language images, and application images: OS images: - Debian - Archlinux - Amazon linux - etc. Langauge images ...
help wanted
kind/enhancement
  • jedevc
  • Opened 
    on Apr 5, 2023
  • #44

docker/buildkit-syft-scanner
End-to-end tests

As part of the CI pipeline, we should have tests that test the built image on various common images. We should ensure that: 1. The SBOM is built without error 2. The SBOM is not empty 3. The SBOM ...
kind/enhancement
  • jedevc
  • Opened 
    on Jan 26, 2023
  • #26

docker/buildkit-syft-scanner
Can't generate SBOM with rpmdb

docker/packaging now generates provenance and sbom but it looks like SBOM is not generated for RHEL based images: https://github.com/docker/packaging/actions/runs/3922421368/jobs/6705347803#step:7:1141 ...
kind/bug
  • crazy-max
  • 3
  • Opened 
    on Jan 17, 2023
  • #20
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue origami icon

Learn how you can use GitHub Issues to plan and track your work.

Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub Issues
ProTip! 
Press the
/
key to activate the search input again and adjust your query.
Issue search results · GitHub