Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

Enhance specifying the mandatory "platform" arg for multi arch images #419

Closed
saisatishkarra opened this issue Jun 8, 2023 · 1 comment · Fixed by #418
Closed

Enhance specifying the mandatory "platform" arg for multi arch images #419

saisatishkarra opened this issue Jun 8, 2023 · 1 comment · Fixed by #418
Assignees

Comments

@saisatishkarra
Copy link

Syft version after 0.75 fails to generate SBOM for multi-arch images and requires explicitly specifying the --platform option even when using the SHA specific to architecture.

Enhance specifying the --platform option when scanning images as an input arg to the Syft arguments.

New Feature PR on Syft that is causing the problem: anchore/syft#1801

How to reproduce:

Syft packages -v image:tag@sha256:<any-non-amd64-arch> -o spdx-json > sbom.spdx.json 
Error: * failed to construct source from user input image:tag could not fetch image: unable to use DockerDaemon source: image has unexpected architecture "arm64", which differs from the user-specified architecture "amd64
@willmurphyscode
Copy link
Contributor

Thanks for opening this issue! The underlying issue in stereoscope has been fixed, see anchore/stereoscope#188. Once we do a syft release that pulls in the stereoscope fix, probably early next week, this issue should be fixed as well.

@willmurphyscode willmurphyscode self-assigned this Jun 9, 2023
@willmurphyscode willmurphyscode moved this to In Progress in OSS Jun 9, 2023
@willmurphyscode willmurphyscode linked a pull request Jun 14, 2023 that will close this issue
@github-project-automation github-project-automation bot moved this from In Progress to Done in OSS Jun 20, 2023
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants