How to export SBOM CRD to CycloneDX compatible JSON #1936
Unanswered
georok
asked this question in
Help & Support
Replies: 2 comments
-
Is there any effort to make these CRDs contain a CycloneDX formatted report or any other format that trivy cli supports, ie:
|
Beta Was this translation helpful? Give feedback.
0 replies
-
Cyclonedx SBOM is inside the kubernetes CRDs in .reports.components.*.
Keep in mind that the new versions of Trivy operator (at least for me it was 0.23.0) it supports already cyclonedx 1.6 scheme so old validators will mark it as a not valid. You can ofcourse just change "specVersion": "1.6", to "specVersion": "1.5". |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
I updated the trivy operator to 0.19.1 and it successfully generates SBOM CRDs. I can export those CRDs with
"kubectl get sbomreports/"name" -n "namespace" -o json > sbom_report.json
but the exported json is not CycloneDX compatible. What am I doing wrong and how should I edit the exported JSON to make it CycloneDX compatible?
thanks
Beta Was this translation helpful? Give feedback.
All reactions