Skip to content

chore(sbom): generate SBOM only for final images#77

Draft
nervgh wants to merge 3 commits intomainfrom
chore/sbom/generate-sbom-on-final-images
Draft

chore(sbom): generate SBOM only for final images#77
nervgh wants to merge 3 commits intomainfrom
chore/sbom/generate-sbom-on-final-images

Conversation

@nervgh
Copy link
Copy Markdown
Collaborator

@nervgh nervgh commented Apr 16, 2026

No description provided.

@reyreavman reyreavman force-pushed the chore/sbom/generate-sbom-on-final-images branch 2 times, most recently from 9065d69 to f319582 Compare April 20, 2026 09:10
@reyreavman reyreavman marked this pull request as ready for review April 20, 2026 09:11
nervgh and others added 2 commits April 22, 2026 14:59
Signed-off-by: Radmir Khurum <radmir.khurum@flant.com>
Signed-off-by: Radmir Khurum <radmir.khurum@flant.com>
@reyreavman reyreavman force-pushed the chore/sbom/generate-sbom-on-final-images branch from f319582 to 7291da9 Compare April 22, 2026 08:53
Signed-off-by: Radmir Khurum <radmir.khurum@flant.com>
@reyreavman reyreavman force-pushed the chore/sbom/generate-sbom-on-final-images branch from 7291da9 to 56f4a3a Compare April 22, 2026 09:34
Comment thread pkg/build/build_phase.go
// convergeSbomByImagesSets generates SBOM for images respecting dependency order.
// It iterates over ImagesSets sequentially (set by set) to ensure base image SBOMs
// are generated before dependent images. Within each set, images are processed in parallel.
func (phase *BuildPhase) convergeSbomByImagesSets(ctx context.Context) error {
Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have code duplication between

I mean the function convergeSbomByImagesSets looks redundant.

@nervgh nervgh marked this pull request as draft April 22, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants