search

kubernetes-sigs / bom

A utility to generate SPDX-compliant Bill of Materials manifests
https://kubernetes-sigs.github.io/bom/
Apache License 2.0
329 stars 48 forks source link

Add RPM image scanner #342

Closed micahhausler closed 1 year ago

micahhausler commented 1 year ago

What type of PR is this?

/kind feature

What this PR does / why we need it:

Adds support for scanning RPM databases

Which issue(s) this PR fixes:

None

Special notes for your reviewer:

I split layer scanning tests into separate files

Does this PR introduce a user-facing change?

Added support for scanning images with RPM package managers
micahhausler commented 1 year ago

I rebased to include the fix in #343

k8s-ci-robot commented 1 year ago

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: micahhausler, puerco, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files: - ~~[OWNERS](https://github.com/kubernetes-sigs/bom/blob/main/OWNERS)~~ [puerco,saschagrunert] Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
puerco commented 1 year ago

/hold cancel