UNCLASSIFIED - NO CUI

Skip to content

Fix anchore syft sbom generation

blake.burkhart requested to merge blake.burkhart-master-patch-55328 into development

currently the data is wrapped in quotes inside the file.

Untested, but I think this fixes it. Let subprocess write directly to the file

Alternately update syft and use this new feature: https://github.com/anchore/syft/pull/732. This would actually be preferred, I'd like both SPDX and CycloneDX if possible.

Merge request reports