sbom-cli-plugin icon indicating copy to clipboard operation
sbom-cli-plugin copied to clipboard

Plugin for Docker CLI to support SBOM creation using Syft

Results 25 sbom-cli-plugin issues
Sort by recently updated
recently updated
newest added

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220412020605-290c469a71a5 to 0.17.0. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.0.0-20220412020605-290c469a71a5&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependencies
go

Bumps gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0. [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gopkg.in/yaml.v3&package-manager=go_modules&previous-version=3.0.0-20210107192922-496545a6307b&new-version=3.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependencies
go

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.46.0 to 1.56.3. Release notes Sourced from google.golang.org/grpc's releases. Release 1.56.3 Security server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487) In addition to this...

dependencies
go

Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.12+incompatible to 24.0.9+incompatible. Release notes Sourced from github.com/docker/docker's releases. v24.0.9 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant...

dependencies
go

Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.0+incompatible to 2.8.2+incompatible. Release notes Sourced from github.com/docker/distribution's releases. v2.8.2 What's Changed Revert registry/client: set Accept: identity header when getting layers by @​ndeloof in distribution/distribution#3783 Parse http...

dependencies
go

**What would you like to be added**: support for https://github.com/anchore/syft/releases/tag/v0.73.0 **Why is this needed**: want to use a actual version **Additional context**:

enhancement

**What happened**: When running, `docker sbom` as root, the command works fine. When su-ing over to our 'gitlab-runner' user, installing the plugin for that user, docker reports it as an...

bug

**What happened**: Ran ``` docker sbom my-image ``` and file left in /tmp/sbom-cli-plugin-..../docker-daemon-image.... **What you expected to happen**: SBOM output on STDOUT, and no files left on device **How to...

bug

If found that the install script was not running in the `docker:stable` docker container unless I created the directory `~/.docker` manually, which does not exist by default. I thought it...

**What would you like to be added**: When trying to install the plugin without Docker Desktop I was seeing the error "docker is not installed; refusing to install to '~/.docker/cli-plugins"....

enhancement