Add Meta-Data to Build for more accurate Container SBOM generation
Open
area/build
enhancement
help wanted
- Dominant language
- C++
- Stars
- 28.9k
- Forks
- 5.6k
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 437
Description
*Title*: Add a JSON payload as a .note.package ELF section
*Description*:
[add a JSON payload as a .note.package ELF section](https://systemd.io/ELF_PACKAGE_METADATA/). It looks like there are already bazel rules in envoy that [add ELF notes](https://github.com/envoyproxy/envoy/blob/db42eedc24fa7036d620d18a5274966f600accbc/bazel/BUILD#L44), another rule could be added during the release to include name and version information.
[optional *Relevant Links*:]
>[Related issue: Envoy currently missing from SBOM](https://github.com/anchore/syft/issues/2828#issuecomment-2088700041)
Contributor guide
Assessment
This issue has not been assessed yet.