joehorn/sbom-ci-worker repository overview

⁠SBOM CI worker

Docker image for doing CI/CD jobs with OSV-Scanner⁠ , CycloneDX Generator (cdxgen)⁠ , and ORAS⁠.

⁠Active tags

• latest , which will be weekly built/updated

⁠Volume(s)

• /workspace

⁠Built-in tools/commands

• cdxgen
• oras
• osv-scanner

⁠Notes

• This image can run with GitLab runner⁠.
• This image can be directly run in CLI and mount volume, but file/directory permissions might be changed.

  # chmod -R 777 .
  # docker run --rm -v "$(pwd)":/workspace joehorn/sbom-ci-worker:latest osv-scanner .

⁠Maintainer info.

Blog : https://www.joehorn.tw/⁠