You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
What happened:
I am creating an SBOM for the docker.io/bitnami/redis image.
As I was looking at the artifacts, I noticed that the redis binary was absent from the list of artifacts in the SBOM. bitnami/redis SBOM syft-1.1.1
What you expected to happen:
The redis binary should be listed as an artifact in the SBOM
I compared the SBOM with syft version 0.101.1 and the only difference is that in the older version there is a mention of the redis in the list of artifacts:
I believe the digest points to a multi-architecture manifest, so when syft asks docker to pull the image, the client decides which platform to pull, and if the client pulls the linux/amd64 platform, redis is found, but not if it pulls the linux/arm64 platform.
I'll leave this issue open as a request to enhance the binary classifier to detect the arm64 build of redis.
What happened:
I am creating an SBOM for the
docker.io/bitnami/redis
image.As I was looking at the artifacts, I noticed that the redis binary was absent from the list of artifacts in the SBOM.
bitnami/redis SBOM syft-1.1.1
What you expected to happen:
The redis binary should be listed as an artifact in the SBOM
Steps to reproduce the issue:
Anything else we need to know?:
I compared the SBOM with syft version
0.101.1
and the only difference is that in the older version there is a mention of the redis in the list of artifacts:bitnami/redis SBOM syft-0.101.1
Environment:
syft version
:cat /etc/os-release
or similar):macos
,m1
The text was updated successfully, but these errors were encountered: