New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Create full SBOM #1375

Open

bwbroersma opened this issue Mar 30, 2024 · 0 comments

Labels

infrastructure-docker

Milestone

Collaborator

bwbroersma commented Mar 30, 2024

A full software bill of materials (SBOM) should be created, including all docker images and installed packages in these images.

This is very useful for checking Common Vulnerabilities and Exposures (CVEs). Like the current CVE-2024-3094.

Related:

Stable docker builds #1284
Cyber Resilience Act and search for the mentions of "software bill of materials"

bwbroersma added the infrastructure-docker label

bwbroersma added this to the intake milestone

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment