I'm trying to explore using apko to build minirootfs images and I'm exploring SBOM generation as part of this.
When calling apko build-minirootfs --help I see:
--sbom-path string generate an SBOM
Which does appear to come from build-minirootfs.go specifically:
|
build.WithSBOM(sbomPath), |
|
cmd.Flags().StringVar(&sbomPath, "sbom-path", "", "generate an SBOM") |
But unless I'm missing something, I think that although that sbomPath argument does get passed into BuildMinirootFSCmd, I don't think the BuildMinirootFSCmd function actually does anything with it.
Am I missing something, or is the SBOM generation not actually fully hooked-up for minirootfs builds?
I'm trying to explore using
apkoto build minirootfs images and I'm exploring SBOM generation as part of this.When calling
apko build-minirootfs --helpI see:Which does appear to come from
build-minirootfs.gospecifically:apko/internal/cli/build-minirootfs.go
Line 59 in dd5a700
apko/internal/cli/build-minirootfs.go
Line 69 in dd5a700
But unless I'm missing something, I think that although that
sbomPathargument does get passed intoBuildMinirootFSCmd, I don't think theBuildMinirootFSCmdfunction actually does anything with it.Am I missing something, or is the SBOM generation not actually fully hooked-up for minirootfs builds?