tern
tern copied to clipboard
tern-tools
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-...
There are situations where Tern may need to run as a service somewhere on the cloud and get access via an external API. For that to happen, it needs to...
Dockerfile's ARG directive can store build arguments given to docker build as --build-arg. Tern cannot get this from Docker itself and hence needs to be accepted through some command line...
**Describe the Feature** Windows offers a Docker [base image](https://hub.docker.com/_/microsoft-windows). Once Tern is enabled to run in a container on Windows, we might look in to enabling windows package collection for...
Hi Team, Please create an Jenkins plugin for tern tool so it will be easy to integrate Jenkins to tern. I will lead great help in CI/CD pipeline. ISSUE: Tern...
**Describe the bug** Installing Scancode-toolkit 31.1.1 and Tern 2.10.1 together results in a package conflict, because both rely on a different version of the `debian-inspector` package. **To Reproduce** Try to...
**Describe the bug** My container has a two line Python program whose content is this: import numpy print ("Hello World!") The Docker image for the program is: REPOSITORY TAG IMAGE...
**Describe the Feature** Support all/most of the `docker buildx build` CLI arguments when calling either `tern sbom -f Dockerfile` or `tern lock -f Dockerfile`. `tern` builds the Dockerfile itself for...
**Describe the Feature** Add support for all of the recognized `skopeo` image prefixes: i.e. `oci-archive:`, `docker-archive:`, `containers-storage:` (podman image cache), `dirs:`, etc. **Use Cases** - I want to analyze a...
**Describe the Feature** I'm using tern to generate an SPDX-json formatted SBOM but it only seems to support SDPX 2.2 **Use Cases** I would like to generate a SPDX 2.3...
Remove ] from the end of a link: `https://github.com/spdx/tools/]` -> `https://github.com/spdx/tools/`
Metadata
Owner
Metadata
Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-...