summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorAndrii Klymenko <a.klymenko@vyos.io>2026-04-23 15:20:09 +0300
committerGitHub <noreply@github.com>2026-04-23 15:20:09 +0300
commit16ced6d41f030f5621e667abfe0e35aa498bc71b (patch)
treecfcc0c4f260365c9ea834407d669d47308c1965e /scripts
parentbdd7024da3a71854c6ce15c312581900e9b817c8 (diff)
downloadvyos-build-16ced6d41f030f5621e667abfe0e35aa498bc71b.tar.gz
vyos-build-16ced6d41f030f5621e667abfe0e35aa498bc71b.zip
T8542: Add functionality to generate SBOM file from ISO image
Exclude the transfer directory from scan.
Diffstat (limited to 'scripts')
-rwxr-xr-xscripts/check-qemu-install1
1 files changed, 1 insertions, 0 deletions
diff --git a/scripts/check-qemu-install b/scripts/check-qemu-install
index f850a8cb..98b49a64 100755
--- a/scripts/check-qemu-install
+++ b/scripts/check-qemu-install
@@ -1328,6 +1328,7 @@ try:
# Generate SBOMs using the syft util for the whole filesystem with all layers, output both CycloneDX and SPDX formats
syft_cmd = (
f'sudo TERM=dumb /tmp/syft / -q'
+ f' --exclude **/mnt/sbom_transfer/**'
f' --source-name {iso_name}.iso --source-version {iso_name}'
f' -o cyclonedx-json=/mnt/sbom_transfer/{sbom_file_cdx}'
f' -o spdx-json=/mnt/sbom_transfer/{sbom_file_spdx}'