Batuhan Apaydın comments

Results 338 comments of


                                            Batuhan Apaydın

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

kinly ping @AkihiroSuda @Dentrax

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

it will be because they use Syft too under the hood

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

There are two ways of developing this feature. The first is executing the Syft binary as we did while implementing the signing feature by performing the cosign binary. The latter...

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

Kindly ping @AkihiroSuda

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

Syft is also capable of attaching an SBOM result[^1] in the form of in-toto attestations[^2] with its new command called `attest`[^3], and this command also signs the SBOM result and...

generate SBOM both SPDX and Cyclone DX formats based for container images and attach em by using cosign attach

kindly ping sir @AkihiroSuda

feat: add cosign binary to nerdctl-full

> Please remove this > > https://github.com/containerd/nerdctl/blob/e7858835cb43a54aae10500e99a120db11180701/Dockerfile#L243 thank you for bringing it to my attention, I've removed this line. ✌️

feat: add cosign binary to nerdctl-full

> > cosign-linux-amd64 81.4 MB > > Why is this binary so large? [sigstore/cosign@`v1.4.1` (release)](https://github.com/sigstore/cosign/releases/tag/v1.4.1) idk actually :(

feat: add cosign binary to nerdctl-full

kindly ping @AkihiroSuda 🙋🏻‍♂️

feat: add cosign binary to nerdctl-full

kindly ping @AkihiroSuda 🙋🏻‍♂️