Azure / Azure/acr

Allow creation of SBOM in ACR by using 'docker sbom'

Open
#726 12 comments 0 reactions 1 assignee Assigned to @yizha1 View on GitHub
feature-oci-artifacts feature-request triaged
Dominant language
No language data
Stars
177
Forks
137
PR merge metrics
No merged PRs in 30d

Description

**What is the problem you're trying to solve**
We use ACR to build our images in our CI pipeline. Additionally, we want to generate SBOM files.
We tried to execute the following command:

```
az acr run --registry myregistry --cmd 'docker sbom myimage' /dev/null
```

However, we get an error:

```
2023/12/19 15:18:53 Executing step ID: acb_step_0. Timeout(sec): 600, Working directory: '', Network: 'acb_default_network'
2023/12/19 15:18:53 Launching container with name: acb_step_0
/usr/local/bin/docker-entrypoint.sh: line 20: exec: sbom: not found
```

**Describe the solution you'd like**
It would be nice to be able to create SBOM from images in the ACR without the need to pull them.

**Additional context**
Other commands like 'docker inspect' work flawlessly.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.