DataDog / agent-payload

Payload format description for communication between the agent and the Datadog backend
BSD 3-Clause "New" or "Revised" License
21 stars 19 forks source link

[CONTINT-3744] [sbom] Add a `repo_digests` field for the repo digests #283

Closed L3n41c closed 9 months ago

L3n41c commented 10 months ago

What does this PR do?

Add a repo_digests field to the sbom message.

Motivation

The backend currently indexes the sboms by repo digests. It currently has to look for it as a trivy-specific property inside the CycloneDX SBOM. Having the field available in a dedicated field in SBOMPayload will make the process less dependent on potential future trivy changes.

Additional Notes

Possible Drawbacks / Trade-offs

Describe how to test/QA your changes

Reviewer's Checklist

Reviewers: please see the review guidelines.