You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
syft attest ghcr.io/datosh-org/most-secure-calculator/calculator@sha256:6914a299cd3c5ebad732f488cb1909453422595c9d4d0527d8abd68ab4ebc43d
2023/11/17 13:14:08 error during command execution: 1 error occurred:
* unable to build SBOM: attestations are only supported for oci images at this time
Anything else we need to know?:
Environment:
Output of syft version:
OS (e.g: cat /etc/os-release or similar):
The text was updated successfully, but these errors were encountered:
Thanks for the report @datosh - sorry for the breakage here in this command - I'll try and make some time to get a patch in that get's this working again before the next release. Thanks for the detailed notes and cause of the error.
Thanks for getting this fixed this quickly, @wagoodman !
I was able to build & test locally. Works like a charm.
Any chance that there is a new release coming that includes the fix? I will give a workshop next week, and would love to include syft & grype, including the syft attest support.
What happened:
Since release of https://github.com/anchore/syft/releases/tag/v0.85.0 the
syft attest
functionality is broken.The specific commit 4da3be8 changed the
buildSBOM
logic to include a check about the artifact type. As far as I understand the code this check tests the wrong thing, as it fails if the image is a container image, but this is exactly what we need it to be: 4da3be8#diff-0d5f53ec503a82548b069d34737048067ca7a2c99ced7e5bde834207a22759ceR64I tried to fix this locally by changing it to
if !detection.IsContainerImage() {
, but then it fails further along the wayWhat you expected to happen:
Steps to reproduce the issue:
With any syft version >= 0.85.0
Anything else we need to know?:
Environment:
syft version
:cat /etc/os-release
or similar):The text was updated successfully, but these errors were encountered: