anchore / syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Apache License 2.0

6.29k stars 578 forks source link

Include the OS Information available in the SBOM model in the SPDX reports #3462

Open josegomezr opened 3 days ago

josegomezr commented 3 days ago

Description

Include the OS Information available in the SBOM model in the SPDX reports

Fixes #3012

Type of change

[x] New feature (non-breaking change which adds functionality)

Checklist:

[x] I have added unit tests that cover changed behavior
[x] I have tested my code in common scenarios and confirmed there are no regressions
[ ] I have added comments to my code, particularly in hard-to-understand sections

TODO:

[ ] Understand the offset logic for {relationship,pkgCont}OffsetPerVersion