Skip to content

[v0.11] cherry-picks#3481

Merged
tonistiigi merged 3 commits intomoby:v0.11from
tonistiigi:v0.11-picks-2
Jan 9, 2023
Merged

[v0.11] cherry-picks#3481
tonistiigi merged 3 commits intomoby:v0.11from
tonistiigi:v0.11-picks-2

Conversation

@tonistiigi
Copy link
Copy Markdown
Member

jedevc and others added 2 commits January 9, 2023 11:49
If we have any SBOMs that are notated as primary, then we should ensure
that they appear before the others in the list of attestations.

This ensures that clients should be able to naively take the "first"
SBOM, to get the most relevant one that applies to the main
rootfs.

Signed-off-by: Justin Chadwell <me@jedevc.com>
(cherry picked from commit eabeb4f)
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 5f010c4)
Follow-up to PR 3469

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
(cherry picked from commit 6018fd0)
@tonistiigi tonistiigi merged commit 96a7478 into moby:v0.11 Jan 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants