CloudBees action: Generate an SBOM with Syft

Use this action to generate a software bill of materials (SBOM) from a container image or filesystem with the open-source Syft scanner from Anchore. Generate SBOMs to provide dependency visibility.

Inputs

Table 1. Input details

Input name	Data type	Required?	Description
binary-tar-path	String	Yes	The path of the binary to be scanned. Note The binary file must be in the TAR format.

Usage example

In your YAML file, add:

      - name: Generate an SBOM with Syft
        uses: cloudbees-io/syft-sbom-plugin@v1
        with:
          binary-tar-path: /path/to/binary.tar

License

This code is made available under the MIT license.

References

• Learn more about using actions in CloudBees workflows.

• Learn about the CloudBees platform.