Docker SBOM - Software Bill Of Materials
In an earlier post on this blog I was curious about comparing Docker images to try to track down the differences that might be causing performance problems. Since then I have had a play with the sbom Docker command for listing out what is included in the image. Following the documentation at: https://docs.docker.com/engine/sbom/ Below is an example of the output of a run of a locally built app: > docker sbom hello-world-alpine-jlink:latest Syft v0.43.0 ✔ Loaded image ✔ Parsed image ✔ Cataloged packages [16 packages] NAME VERSION TYPE alpine-baselayout 3.2.0-r20 ...