Skip to content

Conversation

@jayavenkatesh19
Copy link

Towards https://github.com/rapidsai/build-infra/issues/280

Adds SBOM to base and notebook images

  • Add a new stage in each Dockerfile called syft-base with the Syft binary installed on a minimal alpine 3.20 image.
  • The main docker build is done using a stage called base-build and notebooks-build to differentiate it from the final image.
  • Another stage is added called base-sbom/ notebooks-sbom where the built stage is mounted to a specified location on the syft-base stage
  • A syft-scan is done on the mounted location, and an SBOM is generated.
  • The generated SBOM is then copied to the final stage, with image name and tags kept unchanged to ensure no changes to how these images are built and published.

@jayavenkatesh19 jayavenkatesh19 requested a review from a team as a code owner October 28, 2025 21:55
@jayavenkatesh19 jayavenkatesh19 added feature request New feature or request breaking Breaking change labels Oct 28, 2025
Signed-off-by: Jaya Venkatesh <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking Breaking change feature request New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant