UNCLASSIFIED - NO CUI

Skip to content

Sboms via convert

Chad Geary requested to merge sboms-via-convert into master

current:

  • create 4 SBOM formats in parallel

new:

  • create 1 SBOM format (syft-json)
  • use 1 SBOM to syft convert to other 3 formats

syft's SBOM process involves unpacking the image and reading it (slow). The current process does that 4 times. The new process would do it once then convert to other formats (fast).

tests: finished_pipelines-sbom.csv

Merge request reports

UNCLASSIFIED - NO CUI