konflux-ci / build-definitions

Apache License 2.0
23 stars 133 forks source link

Add image reference to SBOM #1629

Open Allda opened 3 days ago

Allda commented 3 days ago

The SBOM generated by the buildah task now contains the reference to the image itself. The new script supports both spdx and cyclonedx format.

In order to inject the image reference to the SBOM steps were rearanged to push first and then generate SBOM. The code that stored the sbom into image itself was removed as not used anymore.

JIRA: ISV-5411

Before you complete this pull request ...

Look for any open pull requests in the repository with the title "e2e-tests update" and see if there are recent e2e-tests updates that will be applicable to your change.

Allda commented 2 days ago

The build task with new changes has been tested as part of this pipelinerun https://github.com/Allda/devfile-sample-python-basic/pull/16/checks?check_run_id=33323099120