Commit eb23b260 authored by Guilhem Bonnefille's avatar Guilhem Bonnefille Committed by Pierre Smeyers
Browse files

feat(sbom): update default SBOM options to include Java catalogers when using the Jib variant 

As Jib generates Docker images embedding Jar application, the Java catalogers should be activated by default.
Nix cataloger added.
parent 89dbd9e8

kicker.json

+1 −1
Original line number Diff line number Diff line
@@ -266,7 +266,7 @@ 
            {

              "name": "MAVEN_SBOM_OPTS",

              "description": "Options for syft used for SBOM analysis",

              "default": "--catalogers rpm-db-cataloger,alpmdb-cataloger,apkdb-cataloger,dpkgdb-cataloger,portage-cataloger",

              "default": "--override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java",

              "advanced": true

            }

          ]

templates/gitlab-ci-maven-jib.yml

+1 −1
Original line number Diff line number Diff line
@@ -52,7 +52,7 @@ spec: 
      default: registry.hub.docker.com/anchore/syft:debug

    sbom-opts:

      description: Options for syft used for SBOM analysis

      default: --catalogers rpm-db-cataloger,alpmdb-cataloger,apkdb-cataloger,dpkgdb-cataloger,portage-cataloger

      default: --override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java

---

variables:

  MAVEN_SBOM_IMAGE: $[[ inputs.sbom-image ]]