Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[v0.11] cherry-picks #3481

Merged
merged 3 commits into from
Jan 9, 2023
Merged

[v0.11] cherry-picks #3481

merged 3 commits into from
Jan 9, 2023

Conversation

tonistiigi
Copy link
Member

jedevc and others added 2 commits January 9, 2023 11:49
If we have any SBOMs that are notated as primary, then we should ensure
that they appear before the others in the list of attestations.

This ensures that clients should be able to naively take the "first"
SBOM, to get the most relevant one that applies to the main
rootfs.

Signed-off-by: Justin Chadwell <[email protected]>
(cherry picked from commit eabeb4f)
Signed-off-by: Tonis Tiigi <[email protected]>
(cherry picked from commit 5f010c4)
Follow-up to PR 3469

Signed-off-by: Akihiro Suda <[email protected]>
(cherry picked from commit 6018fd0)
@tonistiigi tonistiigi merged commit 96a7478 into moby:v0.11 Jan 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants