Code

CycloneDX SBOM support#61

Code

Merged

kaniini merged 23 commits intomainchainguard-dev/apko:mainfrom feature/sbomchainguard-dev/apko:feature/sbomCopy head branch name to clipboardMar 9, 2022

+1,506

Commits

Commits on Mar 9, 2022

• build: add WantSBOM option for build contexts

  

  kaniini

  authored and

  puerco

  committed
  f06a950

• pkg/build/sbom: add stub SBOM generator

  

  kaniini

  authored and

  puerco

  committed
  e9bdb5e

• pkg/build/image_builder: trigger SBOM generation if requested

  

  kaniini

  authored and

  puerco

  committed
  b9e1b5d

• deps: add github.com/dominodatalab/os-release and gitlab.alpinelinux.org/alpine/go dependencies

  

  kaniini

  authored and

  puerco

  committed
  83d4bb4

• pkg/build/sbom: implement CycloneDX SBOM building

  

  kaniini

  authored and

  puerco

  committed
  ce27930

• pkg/build: write SBOMs to a configured path

  

  kaniini

  authored and

  puerco

  committed
  8f6e5df

• pkg/cli: add --sbom-path option for outputting CycloneDX SBOMs

  

  kaniini

  authored and

  puerco

  committed
  78c35ef

• pkg/build/sbom: use new-style errors rather than errors pkg

  

  kaniini

  authored and

  puerco

  committed
  8879157

• pkg/build/sbom: close the installedDB to prevent leaks

  Show description for 3e22106
  

  kaniini

  authored and

  puerco

  committed
  3e22106

• pkg/build/image_builder: chase err style changes

  

  kaniini

  authored and

  puerco

  committed
  68b7dc2

• Split out cyclonedx types to own packages

  Show description for c7a50fc
  puerco

  committed
  c7a50fc

• Add SBOM object and implementation

  Show description for 37ae555
  puerco

  committed
  37ae555

• Add ReadReleaseData method

  Show description for a39a008
  puerco

  committed
  a39a008

• sbom: Add ReadPackageIndex method

  Show description for 9e610bf
  puerco

  committed
  9e610bf

• Add SBOM Generator interface

  Show description for b4cb776
  puerco

  committed
  b4cb776

• Spin options to own package

  Show description for 8427116
  puerco

  committed
  8427116

• Convert cyclonedx type into an sbom generator

  Show description for 39a836f
  puerco

  committed
  39a836f

• purl: PackageURL package

  Show description for cc2c218
  puerco

  committed
  cc2c218

• Refactor SBOM to work with pluggable generators

  Show description for 44573c4
  puerco

  committed
  44573c4

• sbom: Generate function

  Show description for 2c55029
  puerco

  committed
  2c55029

• Generate sboms using new sbom object

  Show description for 1f92704
  puerco

  committed
  1f92704

• Spin checkGenerators from the impl generate fn

  Show description for 62b37aa
  puerco

  committed
  62b37aa

• Add integration and final unit tests

  Show description for 99a9f08
  puerco

  committed
  99a9f08