Skip to content

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

38 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

stacker-bom: a SBOM workflow tool/library for container image builds

build-test CodeQL

Originally intended as a stacker companion tool to help with container image builds but anyone should be able to use it.

It uses https://github.com/kubernetes-sigs/bom and https://github.com/anchore/syft as its core BOM libraries.

Rationale

  • Every component of a container image must be accounted for
  • Source/build time tooling since most context is available at this time
  • Easily integrate with stacker

About

A stacker companion SBOM generator library and tool

Resources

Stars

0 stars

Watchers

1 watching

Forks

Releases

Packages

Used by

Contributors

Languages