search

anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems
Apache License 2.0
6.07k stars 561 forks source link

Pass in metadata as an argument #1869

Open sej7278 opened 1 year ago

sej7278 commented 1 year ago

What would you like to be added:

A way to add metadata as CLI arguments e.g.

--metadata=publisher,simon --metadata=version,1.1

Why is this needed:

For when autodetection fails or cases where you may have a suite of packages you'd like to give a version, but the versions of the package files have different versions e.g. "my accounting software v1.1" contains libreoffice v7 and java v8

Additional context:

See also #1399

tgerla commented 1 year ago

I believe this is a similar request to https://github.com/anchore/syft/issues/1380

Edit: No, this isn't really the same.