Merge pull request #86 from LaurentGoderre/sbom-supplier

Add support for package supplier in SBOM
docker-library · Dec 8, 2023 · 4e0ea8d · 4e0ea8d
2 parents 36b3473 + 5a86c34
commit 4e0ea8d
Showing 1 changed file with 2 additions and 5 deletions.
diff --git a/scripts/template-helper-functions.jq b/scripts/template-helper-functions.jq
@@ -25,12 +25,9 @@ def sbom:
 						referenceLocator: ("pkg:generic/" + .name + "@" + .version + "?" + (.params | [to_entries[] | .key + "=" + .value] | join("\u0026")))
 					}
 				],
-				licenseDeclared: (if .licenses | length > 0 then
-					(.licenses | join(" AND "))
-				else
-					"NOASSERTION"
-				end)
 			}
+			+ if .licenses then { licenseDeclared: (.licenses | join(" AND ")) } else {} end
+			+ if .supplier then { supplier: .supplier } else {} end
 		]
 	}
 ;