From 16ced6d41f030f5621e667abfe0e35aa498bc71b Mon Sep 17 00:00:00 2001 From: Andrii Klymenko Date: Thu, 23 Apr 2026 15:20:09 +0300 Subject: T8542: Add functionality to generate SBOM file from ISO image Exclude the transfer directory from scan. --- scripts/check-qemu-install | 1 + 1 file changed, 1 insertion(+) (limited to 'scripts') diff --git a/scripts/check-qemu-install b/scripts/check-qemu-install index f850a8cb..98b49a64 100755 --- a/scripts/check-qemu-install +++ b/scripts/check-qemu-install @@ -1328,6 +1328,7 @@ try: # Generate SBOMs using the syft util for the whole filesystem with all layers, output both CycloneDX and SPDX formats syft_cmd = ( f'sudo TERM=dumb /tmp/syft / -q' + f' --exclude **/mnt/sbom_transfer/**' f' --source-name {iso_name}.iso --source-version {iso_name}' f' -o cyclonedx-json=/mnt/sbom_transfer/{sbom_file_cdx}' f' -o spdx-json=/mnt/sbom_transfer/{sbom_file_spdx}' -- cgit v1.2.3