Files
Avi Deitcher 33cd7b749a sbom support
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2023-11-14 14:14:45 +02:00

29 lines
480 B
Bash

#!/bin/sh
# SUMMARY: Check that tar output format build is reproducible
# LABELS:
set -e
# Source libraries. Uncomment if needed/defined
#. "${RT_LIB}"
. "${RT_PROJECT_ROOT}/_lib/lib.sh"
NAME=sbom
clean_up() {
rm -f ${NAME}*
}
trap clean_up EXIT
# build the packages we need
linuxkit pkg build ./package1 ./package2
# build the image we need
linuxkit build --format tar --name "${NAME}" ./test.yml
# check that we got the SBoM
tar -tvf ${NAME}.tar sbom.spdx.json
exit 0