Repository navigation
chore: publish SBOM of docker image #289
Description
as a user of the docker-image o want to see the SBOM of the docker-image on the release, so that i know what is in it.
solution: release process generates the python SBOM of the docker image, and adds it as a release asset.
Activity
chore: add CI artifacts and improve build consistency
chore: add CI artifacts and improve build consistency
chore: add CI artifacts and improve build consistency (#290)
jkowalleck commentedon Jan 20, 2022
not entirely closed. SBOM is generated and uploaded as artifact to the build job, but not attached to the release as an asset.
Cannot upload additional assets, since the needed info is not returned from the release process. caused by python-semantic-release/python-semantic-release#401
jkowalleck commentedon Dec 25, 2023
no longer needed.
just run
docker run cyclinedx environmentand the tool will generate the SBOM for the ptrhon env that is utilized inside the docker image.fixed by #605
jkowalleck commentedon Dec 25, 2023
This feature will be part of the next/upcoming major release.
Changelog: see #605