anistark / anistark/feluda

[FEATURE] Generate SBOMs for container images and filesystems

Ouverte
#247 4 commentaires 2 réactions 0 personnes assignées Voir sur GitHub
feature
Langage dominant
Rust
Étoiles
471
Forks
27
Merge moyen
17 h 14 min
PR mergées (30 j)
5

Description

**Is your feature request related to a problem? Please describe.**
Feature to generate SBOMs for the complete software shipped or deployed in:

- OCI/Docker container images
- Extracted container root filesystems
- Arbitrary filesystem trees, chroots, or installation directories

**Describe the solution you'd like**
Add container-image and filesystem sources to the existing feluda sbom workflow.

Possible CLI design:
```
# Scan a container image
feluda sbom spdx --image nginx:latest --output nginx.spdx.json
feluda sbom cyclonedx --image ghcr.io/example/app@sha256:

# Scan an extracted root filesystem or arbitrary directory
feluda sbom spdx --filesystem ./rootfs --output rootfs.spdx.json
feluda sbom cyclonedx --filesystem /opt/application

# Generate both formats
feluda sbom --image example/app:1.0 --output ./sbom
```

**Describe alternatives you've considered**
syft by anchore is being used currently for this use case.

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.