From 6fbb0e5aa1ef61da8f4581d4caebc570d0572e54 Mon Sep 17 00:00:00 2001 From: Gabriele Bartolini Date: Tue, 14 Oct 2025 15:42:09 +0200 Subject: [PATCH] fix(docs): instructions for SBOMs inspection (#342) Signed-off-by: Gabriele Bartolini --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 0f3b4c14..dbdda13f 100644 --- a/README.md +++ b/README.md @@ -205,11 +205,12 @@ ensure transparency and traceability: Metadata detailing how the image was built, following the [SLSA Provenance](https://slsa.dev) framework. -For example, you can retrieve the SBOM for a specific image using the following -command: +For example, to retrieve the SBOM of a multi-architecture image for a specific +platform (e.g. `linux/amd64`), you can use the following command: ```bash -docker buildx imagetools inspect --format "{{ json .SBOM.SPDX }}" +docker buildx imagetools inspect \ + --format '{{ json (index .SBOM "linux/amd64").SPDX }}' ``` This command outputs the SBOM in JSON format, providing a detailed view of the