Ubuntu Image

[3.X][feature-request] SBOM/SPDX support for images

Bug #2060105 reported by Talha Can Havadar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Image
Confirmed
Medium
Paul Mars

Bug Description

Hello,

SPDX is a widely accepted standard to provide SBOM for a particular image. It would be nice to have it integrated into ubuntu-image tool.

Reference: https://spdx.dev/

See original description
Talha Can Havadar (tchavadar)
description: updated
Revision history for this message
Paul Mars (upils) wrote :

Hello Talha.

Producing a SBOM is on our radar. We need to discuss with the security team to understand what is currently the favored format and if some tools/libraries/methods are already vetted to produce SBOMs.

Revision history for this message
Talha Can Havadar (tchavadar) wrote :

Great to hear Paul, looking forward to see developments in that area

summary: - [3.X][feature-request] SPDX support for images
+ [3.X][feature-request] SBOM/SPDX support for images
Paul Mars (upils)
Changed in ubuntu-image:
status: New → Confirmed
importance: Undecided → Medium
assignee: nobody → Paul Mars (upils)
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.