Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Compare/analyze SBOMs #97

Closed
MPV opened this issue Feb 10, 2024 · 3 comments
Closed

Compare/analyze SBOMs #97

MPV opened this issue Feb 10, 2024 · 3 comments

Comments

@MPV
Copy link

MPV commented Feb 10, 2024

I've run into Docker Scout having issues trying to compare large images in CI:

...so I'd like Docker Scout to be able to compare SBOMs instead of passing entire/large images around.

What's your thoughts on this?
@MPV MPV mentioned this issue Feb 10, 2024
Open
@cdupuis
Copy link
Collaborator

cdupuis commented Feb 10, 2024

@MPV, yes. We have an internal ticket to allow SBOMs to be used as input for the various commands. We’ll likely start with SPDX. Sound good?

@MPV
Copy link
Author

MPV commented Feb 11, 2024

Great to hear, music to my ears. 🎶🎷

@cdupuis
Copy link
Collaborator

cdupuis commented Mar 19, 2024

@MPV, this should be possible now with syft -o spdx-json alpine | docker scout cves sbom://.

@cdupuis cdupuis closed this as completed Mar 19, 2024
@MPV MPV mentioned this issue May 27, 2024
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@MPV @cdupuis