kubernetes-sigs / bom

A utility to generate SPDX-compliant Bill of Materials manifests

Home Page:https://kubernetes-sigs.github.io/bom/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

bom tries to pull down the image from a registry even if it exists in local image cache

developer-guy opened this issue · comments

What happened:

I built the image, then tried to generate an SBOM for that image but bom tool tried to pull an image from a registry even if it exists locally.

Screen Shot 2022-03-14 at 08 45 42

What you expected to happen:

It should generate an SBOM for an image that exists in the local image cache.

How to reproduce it (as minimally and precisely as possible):

Try to build an image then run bom generate -i <img>

Anything else we need to know?:

$bom version
______  ________  ___
| ___ \|  _  |  \/  |
| |_/ /| | | | .  . |
| ___ \| | | | |\/| |
| |_/ /\ \_/ / |  | |
\____/  \___/\_|  |_/
bom: A tool for working with SPDX manifests

GitVersion:    devel
GitCommit:     unknown
GitTreeState:  unknown
BuildDate:     unknown
GoVersion:     go1.17.8
Compiler:      gc
Platform:      darwin/amd64

Environment:

  • Cloud provider or hardware configuration:
  • OS (e.g: cat /etc/os-release): Darwin
  • Kernel (e.g. uname -a): Darwin C02DM1U3MD6R 20.6.0 Darwin Kernel Version 20.6.0: Wed Jun 23 00:26:31 PDT 2021; root:xnu-7195.141.2~5/RELEASE_X86_64 x86_64
  • Others:

I'm willing to work on this, would you mind assigning it to me?

thanks for finding this issue and being willing to fix it! 🎉