trivy icon indicating copy to clipboard operation
trivy copied to clipboard
Published 2 weeks ago • verified publisher icon aquasecurity

Trivy SBOM should take precedence in Rekor attestations

Open knqyf263 opened this issue 3 years ago • 2 comments

--sbom-sources rekor looks for SBOM attestation in Rekor entries and use the first document it finds. But SBOM generated by Trivy should take precedence since it provides better integration.

knqyf263 avatar Sep 16 '22 08:09 knqyf263

@otms61

knqyf263 avatar Sep 16 '22 08:09 knqyf263

Alright, I'll try

otms61 avatar Sep 16 '22 10:09 otms61