Skip to content

Commit 699eee3

Browse files
author
Natalie Arellano
committed
Formatting
Signed-off-by: Natalie Arellano <narellano@vmware.com>
1 parent 9e5caa9 commit 699eee3

File tree

1 file changed

+8
-10
lines changed

1 file changed

+8
-10
lines changed

text/0000-refactor-sbom.md

Lines changed: 8 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -43,22 +43,20 @@ Notably, these new specs codify ways of "attaching" arbitrary OCI artifacts to a
4343
# Motivation
4444
[motivation]: #motivation
4545

46-
- Why should we do this?
46+
- Why should we do this? Our current approach has a few drawbacks, namely:
47+
* It can make application images quite large
48+
* It can be hard to find SBOMs for buildpacks-built images; ecosystem tooling such as `cosign download sbom` won't work (see [PR 278](https://github.com/buildpacks/rfcs/pull/278))
49+
* There is no clear way to associate SBOMs for build and run base images with an application image (today this is unspec'd and entirely up to the platform to manage)
4750

48-
Our current approach has a few drawbacks, namely:
49-
* It can make application images quite large
50-
* It can be hard to find SBOMs for buildpacks-built images; ecosystem tooling such as `cosign download sbom` won't work (see [PR 278](https://github.com/buildpacks/rfcs/pull/278))
51-
* There is no clear way to associate SBOMs for build and run base images with an application image (today this is unspec'd and entirely up to the platform to manage)
5251

5352
- What use cases does it support?
53+
* TODO
5454

55-
TODO
5655

5756
- What is the expected outcome?
58-
59-
* Smaller application images
60-
* Integration with ecosystem tooling
61-
* (Eventually) A more complete SBOM for buildpacks-built images
57+
* Smaller application images
58+
* Integration with ecosystem tooling
59+
* (Eventually) A more complete SBOM for buildpacks-built images
6260

6361
# What it is
6462
[what-it-is]: #what-it-is

0 commit comments

Comments
 (0)