Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: add sbom to container images #536

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

syaghoubi00
Copy link
Contributor

Uses the --sbom=true flag to attach a syft SBOM to the manifest

Closes: #451

@syaghoubi00 syaghoubi00 requested a review from a team as a code owner February 3, 2025 06:08
@alisonlhart alisonlhart added minor and removed feature labels Feb 5, 2025
@alisonlhart alisonlhart force-pushed the feat/GH-451-add-sbom branch 2 times, most recently from c470d42 to ae236fe Compare February 5, 2025 13:39
Uses the `--sbom=true` flag to attach a `syft` SBOM to the manifest

Closes: ansible#451

Signed-off-by: Sebastian Yaghoubi <[email protected]>
@audgirka audgirka force-pushed the feat/GH-451-add-sbom branch from ae236fe to 7f4f714 Compare February 5, 2025 17:59
@syaghoubi00 syaghoubi00 marked this pull request as draft February 8, 2025 18:35
@syaghoubi00
Copy link
Contributor Author

syaghoubi00 commented Feb 8, 2025

buildx needs to be added to the job where the containers are being built (uses: docker/setup-buildx-action@3). Might need to be added to the reusable workflow, if that's where the image building is being done.

uses: ansible/team-devtools/.github/workflows/tox.yml@main

@ssbarnea
Copy link
Member

@syaghoubi00 Apparently this is not supported yet by docker version present on ubuntu. Any suggestions?

If this is available in podman, we could add it conditionally for podman builds.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Status: No status
Development

Successfully merging this pull request may close these issues.

Add SBOM for the produced container images
3 participants