Skip to content

4.2
Compare
Choose a tag to compare
@lunchbreakdev lunchbreakdev released this 05 Aug 14:01
· 27 commits to main since this release
4.2
66a7c76
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

🐛 Bug Fixes

  • Fixed incorrect use of syft's output parameter to correctly dump SBOM to a file that can be archived in Jenkins @psig-bah (#174 )
  • Fix for when additional / could slip into the output filename, causing permissions and access errors later in the step @psig-bah (#173)
  • Updated filenames used for container tarballs to replace / with - to keep all archives at the top level and avoid directory permission/availability issues @psig-bah (#172)
  • Fix for when containers flagged for syft sbom generation are stored in a container repository that requires authentication, the step fails as repository creds provided to the docker library are not passed to the syft container @psig-bah (#171)

Contributors

psig-bah
Assets 2
Loading