Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Track processed images via Annotations #18

Closed
ckotzbauer opened this issue Jan 26, 2022 · 0 comments
Closed

Track processed images via Annotations #18

ckotzbauer opened this issue Jan 26, 2022 · 0 comments
Labels
kind/feature Categorizes issue or PR as related to a new feature.

Comments

@ckotzbauer
Copy link
Owner

Currently with git as the only target it is possible to only analyze images with digests which are not available in the git-repository yet.
With additional targets (e.g. Depdency Track) this is not (easy) possible anymore.

Suggestion:

  1. Add annotations to pods for each container-image which already has been processed
annotations:
  ckotzbauer.sbom-operator.io/<containername>: <containerdigest>

A container-image would be analyzed when the annotation for a particular container of the pod is missing or the digest differs from the current container-digest. To force a single image the annotation can be removed manually.

  1. Add a operator-flag --ignore-annotations to force analysis for all images (in case that there is a new target configured which has to be populated for the first time). After that the flag has to be removed.

/kind feature

@github-actions github-actions bot added the kind/feature Categorizes issue or PR as related to a new feature. label Jan 26, 2022
ckotzbauer added a commit that referenced this issue Jan 27, 2022
ref: #18
Signed-off-by: Christian Kotzbauer <[email protected]>
ckotzbauer added a commit that referenced this issue Jan 28, 2022
ref: #18

Signed-off-by: Christian Kotzbauer <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/feature Categorizes issue or PR as related to a new feature.
Projects
None yet
Development

No branches or pull requests

1 participant