issues
search
kubernetes-sigs
/
bom
A utility to generate SPDX-compliant Bill of Materials manifests
https://kubernetes-sigs.github.io/bom/
Apache License 2.0
325
stars
48
forks
source link
issues
Newest
Newest
Most commented
Recently updated
Oldest
Least commented
Least recently updated
build(deps): bump golang.org/x/term from 0.13.0 to 0.14.0
#370
dependabot[bot]
closed
9 months ago
2
build(deps): bump sigstore/cosign-installer from 3.1.2 to 3.2.0
#369
dependabot[bot]
closed
9 months ago
2
RPM Scanner does not work on layers where /var/lib/rpm is a symlink
#368
pnasrat
opened
9 months ago
7
Update asciinema tutorial to use mage not compile-release-tools
#367
pnasrat
closed
5 months ago
4
Fix goreleaser --skip-sign deprecation
#366
pnasrat
closed
9 months ago
5
build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0
#365
dependabot[bot]
closed
9 months ago
2
build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0
#364
dependabot[bot]
closed
9 months ago
3
build(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0
#363
dependabot[bot]
closed
9 months ago
2
bump release-utils to 0.7.6
#362
cpanato
closed
10 months ago
3
build(deps): bump sigs.k8s.io/release-utils from 0.7.5 to 0.7.6
#361
dependabot[bot]
closed
10 months ago
2
build(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0
#360
dependabot[bot]
closed
10 months ago
2
build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0
#359
dependabot[bot]
closed
10 months ago
2
Trigger docs workflow on changes to workflow config file
#358
stmcginnis
closed
10 months ago
9
update license-data to v3.22
#357
cpanato
closed
10 months ago
1
build(deps): bump actions/checkout from 4.1.0 to 4.1.1
#356
dependabot[bot]
closed
10 months ago
4
build(deps): bump sigs.k8s.io/release-utils from 0.7.5-0.20230901085630-ff2d69b7382d to 0.7.5
#355
dependabot[bot]
closed
10 months ago
2
SPDX relationships like `DEPENDENCY_OF` and `TEST_DEPENDENCY_OF` seem to be not supported
#354
maxhbr
closed
4 months ago
9
build(deps): bump golang.org/x/term from 0.12.0 to 0.13.0
#353
dependabot[bot]
closed
10 months ago
2
build(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0
#352
dependabot[bot]
closed
10 months ago
3
build(deps): bump golang.org/x/mod from 0.12.0 to 0.13.0
#351
dependabot[bot]
closed
10 months ago
4
Update Go to 1.21
#350
cpanato
closed
11 months ago
4
build(deps): bump github.com/package-url/packageurl-go from 0.1.1 to 0.1.2
#349
dependabot[bot]
closed
11 months ago
2
build(deps): bump actions/checkout from 4.0.0 to 4.1.0
#348
dependabot[bot]
closed
11 months ago
2
Support Go binaries in bom generate
#347
micahhausler
opened
11 months ago
2
fix(osinfo): Fix RPM version reporting
#346
micahhausler
closed
11 months ago
1
OSInfo: Distroless Scanner
#345
puerco
closed
11 months ago
3
build(deps): bump github.com/glebarez/go-sqlite from 1.20.3 to 1.21.2
#344
dependabot[bot]
closed
11 months ago
2
fix(osinfo): Fix package URL type for OS packages
#343
micahhausler
closed
11 months ago
1
Add RPM image scanner
#342
micahhausler
closed
11 months ago
3
build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0
#341
dependabot[bot]
closed
11 months ago
2
build(deps): bump goreleaser/goreleaser-action from 4.6.0 to 5.0.0
#340
dependabot[bot]
closed
11 months ago
2
build(deps): bump magefile/mage-action from 2.4.0 to 3.0.0
#339
dependabot[bot]
closed
11 months ago
2
Replace `golang.org/x/tools/go/vcs`
#338
saschagrunert
opened
11 months ago
7
build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3
#337
dependabot[bot]
closed
11 months ago
2
build(deps): bump goreleaser/goreleaser-action from 4.4.0 to 4.6.0
#336
dependabot[bot]
closed
11 months ago
2
build(deps): bump golang.org/x/tools from 0.10.0 to 0.13.0
#335
dependabot[bot]
closed
11 months ago
2
build(deps): bump actions/checkout from 3.6.0 to 4.0.0
#334
dependabot[bot]
closed
12 months ago
2
build(deps): bump sigstore/cosign-installer from 3.1.1 to 3.1.2
#333
dependabot[bot]
closed
12 months ago
2
build(deps): bump golang.org/x/term from 0.11.0 to 0.12.0
#332
dependabot[bot]
closed
11 months ago
3
build(deps): bump gitlab.alpinelinux.org/alpine/go from 0.7.0 to 0.8.0
#331
dependabot[bot]
closed
12 months ago
2
build(deps): bump magefile/mage-action from 2.3.0 to 2.4.0
#330
dependabot[bot]
closed
1 year ago
2
Refactor osinfo Container Scanner
#329
micahhausler
closed
12 months ago
6
build(deps): bump actions/checkout from 3.5.3 to 3.6.0
#328
dependabot[bot]
closed
1 year ago
2
build(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1
#327
dependabot[bot]
closed
1 year ago
2
build(deps): bump github.com/maxbrunsfeld/counterfeiter/v6 from 6.6.2 to 6.7.0
#326
dependabot[bot]
closed
11 months ago
2
build(deps): bump goreleaser/goreleaser-action from 4.3.0 to 4.4.0
#325
dependabot[bot]
closed
1 year ago
2
build(deps): bump actions/setup-go from 4.0.1 to 4.1.0
#324
dependabot[bot]
closed
1 year ago
2
build(deps): bump golang.org/x/tools from 0.10.0 to 0.12.0
#323
dependabot[bot]
closed
11 months ago
6
build(deps): bump golang.org/x/term from 0.10.0 to 0.11.0
#322
dependabot[bot]
closed
1 year ago
2
build(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1
#321
dependabot[bot]
closed
1 year ago
2
Previous
Next