forked from repo-mirrors/cnpg-postgres-containers
Compare commits
1 Commits
Author | SHA1 | Date | |
---|---|---|---|
|
6fbb0e5aa1 |
@@ -205,11 +205,12 @@ ensure transparency and traceability:
|
|||||||
Metadata detailing how the image was built, following the [SLSA Provenance](https://slsa.dev)
|
Metadata detailing how the image was built, following the [SLSA Provenance](https://slsa.dev)
|
||||||
framework.
|
framework.
|
||||||
|
|
||||||
For example, you can retrieve the SBOM for a specific image using the following
|
For example, to retrieve the SBOM of a multi-architecture image for a specific
|
||||||
command:
|
platform (e.g. `linux/amd64`), you can use the following command:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
docker buildx imagetools inspect <IMAGE> --format "{{ json .SBOM.SPDX }}"
|
docker buildx imagetools inspect <IMAGE> \
|
||||||
|
--format '{{ json (index .SBOM "linux/amd64").SPDX }}'
|
||||||
```
|
```
|
||||||
|
|
||||||
This command outputs the SBOM in JSON format, providing a detailed view of the
|
This command outputs the SBOM in JSON format, providing a detailed view of the
|
||||||
|
Reference in New Issue
Block a user