Uploaded image for project: 'Image Builder'
  1. Image Builder
  2. COMPOSER-2381

Look into SBOM compatibility with TPA

XMLWordPrintable

    • Icon: Spike Spike
    • Resolution: Unresolved
    • Icon: Normal Normal
    • None
    • None
    • None
    • None
    • False
    • None
    • False
    • Testable
    • RHIN-1435 - Create SBOMs for RHEL composes

      There's a new (also: customer facing) Red Hat service that can be used to analyze SBOMs. When presented with an SBOM from Brew it currently rejects it as invalid. Let's figure out why that is.

      https://docs.redhat.com/en/documentation/red_hat_trusted_application_pipeline/1.0/html-single/inspecting_your_sbom_using_red_hat_trusted_profile_analyzer/index

              thozza@redhat.com Tomas Hozza
              ssteinbe@redhat.com Simon Steinbeiss
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: