syoul/prestashop-test
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: sbom-generate utilise alpine + install syft (image distroless sans shell)
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
Details

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
syoul
2026-03-19 16:53:24 +01:00
parent 66a843d502
commit e11617a1e1
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.woodpecker.yml
View File

@@ -38,10 +38,12 @@ steps:
# Etape 2b : Generation SBOM (Syft) — inventaire des composants des images Docker # Etape 2b : Generation SBOM (Syft) — inventaire des composants des images Docker
# NOTE: volumes: et from_secret incompatibles dans le meme step — pas de secrets ici # NOTE: volumes: et from_secret incompatibles dans le meme step — pas de secrets ici
- name: sbom-generate - name: sbom-generate
image: anchore/syft:latest image: alpine:3.20
volumes: volumes:
- /var/run/docker.sock:/var/run/docker.sock - /var/run/docker.sock:/var/run/docker.sock
commands: commands:
- apk add --no-cache curl
- curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin latest
- mkdir -p .reports - mkdir -p .reports
- syft prestashop/prestashop:8-apache -o cyclonedx-json --file .reports/sbom-prestashop.cyclonedx.json - syft prestashop/prestashop:8-apache -o cyclonedx-json --file .reports/sbom-prestashop.cyclonedx.json
- syft mariadb:10.11 -o cyclonedx-json --file .reports/sbom-mariadb.cyclonedx.json - syft mariadb:10.11 -o cyclonedx-json --file .reports/sbom-mariadb.cyclonedx.json