search

containers / skopeo

Work with remote images registries - retrieving information, images, signing content
Apache License 2.0
7.74k stars 754 forks source link

Feature requests: image scan/sbom #2364

Open shizzgar opened 6 days ago

shizzgar commented 6 days ago

For example Scan using grype Sbom using syft

mtrmac commented 4 days ago

Thanks for reaching out.

Skopeo is mostly a thin wrapper over the containers/image library. If anything, those scanners might be using such a library, not the other way around. (Also, the library deals with images as a whole, not with the individual files contained in the image.)

It would certainly be possible to write a Skopeo sub-command that invokes an external command, but I don’t see how that is any more convenient than invoking those external commands directly.