mirror of
https://github.com/anchore/syft.git
synced 2025-11-17 16:33:21 +01:00
67 lines
1.3 KiB
Go
67 lines
1.3 KiB
Go
package main
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
|
|
_ "modernc.org/sqlite" // required for rpmdb and other features
|
|
|
|
"github.com/anchore/syft/syft"
|
|
"github.com/anchore/syft/syft/format"
|
|
"github.com/anchore/syft/syft/format/syftjson"
|
|
"github.com/anchore/syft/syft/sbom"
|
|
"github.com/anchore/syft/syft/source"
|
|
)
|
|
|
|
const defaultImage = "alpine:3.19"
|
|
|
|
func main() {
|
|
// automagically get a source.Source for arbitrary string input
|
|
src := getSource(imageReference())
|
|
|
|
// catalog the given source and return a SBOM
|
|
sbom := getSBOM(src)
|
|
|
|
// take the SBOM object and encode it into the syft-json representation
|
|
bytes := formatSBOM(sbom)
|
|
|
|
// show the SBOM!
|
|
fmt.Println(string(bytes))
|
|
}
|
|
|
|
func imageReference() string {
|
|
// read an image string reference from the command line or use a default
|
|
if len(os.Args) > 1 {
|
|
return os.Args[1]
|
|
}
|
|
return defaultImage
|
|
}
|
|
|
|
func getSource(input string) source.Source {
|
|
src, err := syft.GetSource(context.Background(), input, nil)
|
|
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
return src
|
|
}
|
|
|
|
func getSBOM(src source.Source) sbom.SBOM {
|
|
s, err := syft.CreateSBOM(context.Background(), src, nil)
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
|
|
return *s
|
|
}
|
|
|
|
func formatSBOM(s sbom.SBOM) []byte {
|
|
bytes, err := format.Encode(s, syftjson.NewFormatEncoder())
|
|
if err != nil {
|
|
panic(err)
|
|
}
|
|
return bytes
|
|
}
|