Commit 3d9a0a06 authored by Guilhem Bonnefille's avatar Guilhem Bonnefille
Browse files

Merge branch 'add-trace-support-for-syft' into 'master' 

make syft verbose when TRACE required

See merge request to-be-continuous/docker!91
parents 5c9148c0 c29aa0f6

templates/gitlab-ci-docker.yml

+1 −1
Original line number Diff line number Diff line
@@ -797,7 +797,7 @@ docker-sbom: 
  script:

    - mkdir -p -m 777 reports

    - dockerfile_hash=$(md5sum "$DOCKER_FILE" | cut -d" " -f1)

    - /syft packages $DOCKER_SNAPSHOT_IMAGE $DOCKER_SBOM_OPTS -o cyclonedx-json=reports/docker-sbom-${dockerfile_hash}.cyclonedx.json

    - /syft packages ${TRACE+-vv} $DOCKER_SNAPSHOT_IMAGE $DOCKER_SBOM_OPTS -o cyclonedx-json=reports/docker-sbom-${dockerfile_hash}.cyclonedx.json

    - chmod a+r reports/docker-sbom-${dockerfile_hash}.cyclonedx.json

  artifacts:

    name: "SBOM for docker from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"