Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stacks - receipt.sh script - multi arch support #992

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

pacostas
Copy link
Contributor

@pacostas pacostas commented Nov 1, 2024

Summary

This PR extends receipts.sh script functionality by adding below features:

  • Multi arch support, is able to produce sbom files for any architecture that is mentioned on the manifests.json of a .oci image. The implementation is based on the current jammy-tiny-stack receipts script https://github.com/paketo-buildpacks/jammy-tiny-stack/blob/main/scripts/receipts.sh
  • It does not change any of the current functionality for single architectures, and even the output names of the receipts for the amd64 remain the same to keep backwards compatibility with existing workflows.
  • Using scan command on syft, as packages command is deprecated (see below warning message)
Command "packages" is deprecated, use `syft scan` instead
Flag --file has been deprecated, use: --output FORMAT=PATH
  • Adds support for ubi-base-stack, as jammy-tiny-stack receipts.sh script does not set proper permissions in case the stacks path is different.

Use Cases

Checklist

  • I have viewed, signed, and submitted the Contributor License Agreement.
  • I have linked issue(s) that this PR should close using keywords or the Github UI (See docs)
  • I have added an integration test, if necessary.
  • I have reviewed the styleguide for guidance on my code quality.
  • I'm happy with the commit history on this PR (I have rebased/squashed as needed).

@pacostas pacostas requested a review from a team as a code owner November 1, 2024 12:24
@pacostas
Copy link
Contributor Author

pacostas commented Nov 1, 2024

@ForestEckhardt

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant