SBOM exports #46
Labels
🪄 enhancement
New feature or request
Comments
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 16, 2025
This commit adds an option to generate an sbom file via the new `--export-sbom`option. Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 16, 2025
This commit adds an option to generate an sbom file via the new `--export-sbom`option. Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 16, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `disk.qcow2.buildroot-build.spdx.json` Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 16, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 16, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 17, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild#46
mvo5
added a commit
to mvo5/image-builder-cli
that referenced
this issue
Jan 17, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild#46
github-merge-queue bot
pushed a commit
that referenced
this issue
Jan 19, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: #46
mvo5
added a commit
to mvo5/images
that referenced
this issue
Jan 20, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild/image-builder-cli#46
mvo5
added a commit
to mvo5/images
that referenced
this issue
Jan 20, 2025
This commit adds an option --extra-artifacts that can be used to generate extra artifacts during the build or manifest generation. Initially supported is `sbom` (but `manifest` is planned too). To use it run `--extra-artifacts=sbom` and it will generate files like `centos-9-qcow2-x86_64.image-os.spdx.json` in the output directory next to the generate runable artifact. Closes: osbuild/image-builder-cli#46
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Let's allow exporting SBOMs together with the build pipelines. They can end up in the same output directory next to the produced artifact.
Probably related to #45, #43, or/and #42.
Can be optional, e.g.
image-builder build --with-sbom ....The text was updated successfully, but these errors were encountered: