diff --git a/Earthfile b/Earthfile index fd4639d..0e58811 100644 --- a/Earthfile +++ b/Earthfile @@ -208,10 +208,11 @@ image-sbom: COPY +version/VERSION ./ ARG VERSION=$(cat VERSION) ARG FLAVOR + ARG VARIANT COPY +syft/syft /usr/bin/syft RUN syft / -o json=sbom.syft.json -o spdx-json=sbom.spdx.json - SAVE ARTIFACT /build/sbom.syft.json sbom.syft.json AS LOCAL core-${FLAVOR}-${VERSION}-sbom.syft.json - SAVE ARTIFACT /build/sbom.spdx.json sbom.spdx.json AS LOCAL core-${FLAVOR}-${VERSION}-sbom.spdx.json + SAVE ARTIFACT /build/sbom.syft.json sbom.syft.json AS LOCAL build/${VARIANT}-${FLAVOR}-${VERSION}-sbom.syft.json + SAVE ARTIFACT /build/sbom.spdx.json sbom.spdx.json AS LOCAL build/${VARIANT}-${FLAVOR}-${VERSION}-sbom.spdx.json luet: FROM quay.io/luet/base:$LUET_VERSION