sbom-cli-plugin
sbom-cli-plugin copied to clipboard
Plugin for Docker CLI to support SBOM creation using Syft
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220412020605-290c469a71a5 to 0.17.0. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...
Bumps gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.46.0 to 1.56.3. Release notes Sourced from google.golang.org/grpc's releases. Release 1.56.3 Security server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487) In addition to this...
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.12+incompatible to 24.0.9+incompatible. Release notes Sourced from github.com/docker/docker's releases. v24.0.9 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.0+incompatible to 2.8.2+incompatible. Release notes Sourced from github.com/docker/distribution's releases. v2.8.2 What's Changed Revert registry/client: set Accept: identity header when getting layers by @ndeloof in distribution/distribution#3783 Parse http...
**What would you like to be added**: support for https://github.com/anchore/syft/releases/tag/v0.73.0 **Why is this needed**: want to use a actual version **Additional context**:
**What happened**: When running, `docker sbom` as root, the command works fine. When su-ing over to our 'gitlab-runner' user, installing the plugin for that user, docker reports it as an...
**What happened**: Ran ``` docker sbom my-image ``` and file left in /tmp/sbom-cli-plugin-..../docker-daemon-image.... **What you expected to happen**: SBOM output on STDOUT, and no files left on device **How to...
If found that the install script was not running in the `docker:stable` docker container unless I created the directory `~/.docker` manually, which does not exist by default. I thought it...
**What would you like to be added**: When trying to install the plugin without Docker Desktop I was seeing the error "docker is not installed; refusing to install to '~/.docker/cli-plugins"....