From 86a41bc74db0019402f4a501eabac890fe99eb3b Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Serta=C3=A7=20=C3=96zercan?= <852750+sozercan@users.noreply.github.com> Date: Mon, 25 Mar 2024 14:57:28 -0700 Subject: [PATCH] index sbom --- content/build/attestations/sbom.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/content/build/attestations/sbom.md b/content/build/attestations/sbom.md index 20586689e3..4adf3d16b2 100644 --- a/content/build/attestations/sbom.md +++ b/content/build/attestations/sbom.md @@ -188,6 +188,11 @@ $ docker buildx imagetools inspect /: \ } ``` +> **Tip** +> +> If the image is multi-arch, you can use check the index for the arch you want with `--format '{{ json (index .SBOM "linux/amd64").SPDX }}'`. +{ .tip } + You can also construct more complex expressions using the full functionality of Go templates. For example, you can list all the installed packages and their version identifiers: