M0ses / cooverview

Container Overview - A simple CGI script to read container information from a docker registry and display it
GNU General Public License v3.0
4 stars 1 forks source link

show bill of materials #14

Open lnussel opened 4 years ago

lnussel commented 4 years ago

Any image build in OBS produces an additional ".packages" file. That file lists the contained rpm packages with their name, version, disturl and most importantly license. That information is very valuable to a class of users that have a whitelist of free software licenses they are allowed to run on their infrastructure.

I've filed an issue for OBS to show that information in a better way. The registry then should link to that as well: https://github.com/openSUSE/open-build-service/issues/9040

adrianschroeter commented 4 years ago

I am not sure that these files will stay published.

IMHO we should provide better readable informations and some standarized output via obsgendiff instead.

lnussel commented 4 years ago

what is obsgendiff?