docker/go-imageinspect
1
0
Fork 0
mirror of https://github.com/docker/go-imageinspect synced 2026-04-05 19:34:48 +00:00
Code Issues Projects Releases Packages Wiki Activity
No description
40 commits 10 branches 0 tags 152 KiB
  • Go 86.1%
  • Dockerfile 9.8%
  • HCL 4.1%
Find a file
Exact
Tõnis Tiigi e405fbd0dd
 Merge pull request #17 from jedevc/spdx-use-file-relationships 
sbom: use relationship data to reconstruct package files
2023-02-09 10:12:12 -08:00
.github docs: update references to buildx in contributing guide 2023-01-26 11:29:46 +00:00
cmd/imageinspect set license headers 2022-08-20 12:16:34 +02:00
testutil set license headers 2022-08-20 12:16:34 +02:00
.dockerignore add Dockerfile and bake definition 2022-08-20 12:16:34 +02:00
.gitignore add Dockerfile and bake definition 2022-08-20 12:16:34 +02:00
.golangci.yml golangci-lint and fix lint issues 2022-08-20 12:16:34 +02:00
buildinfo.go set license headers 2022-08-20 12:16:34 +02:00
docker-bake.hcl hack: add local platform to bin target 2023-01-31 13:39:54 +00:00
Dockerfile hack: add --platform to golang base 2023-01-31 14:31:15 +00:00
go.mod vendor: update spdx/tools-golang to v0.4.0 2023-01-30 14:31:14 +00:00
go.sum vendor: update spdx/tools-golang to v0.4.0 2023-01-30 14:31:14 +00:00
LICENSE contributing files 2022-08-15 00:30:09 +02:00
load.go set license headers 2022-08-20 12:16:34 +02:00
load_test.go set license headers 2022-08-20 12:16:34 +02:00
provenance.go set license headers 2022-08-20 12:16:34 +02:00
README.md docs: add experimental info and support details to README 2023-02-01 10:41:39 +00:00
sbom.go sbom: use relationship data to reconstruct package files 2023-02-01 10:35:38 +00:00
types.go set license headers 2022-08-20 12:16:34 +02:00

README.md

go-imageinspect

CI Status

Go library for accessing container images with their associated objects and typed metadata.

Experimental 🧪

This repository is considered EXPERIMENTAL and under active development until further notice. It is subject to non-backward compatible changes or removal in any future version.

Rationale

Image authors are increasingly distributing associated metadata and artifacts alongside their images, such as OCI annotations, SLSA Provenance, SBOMs, signatures, and more. The exact method of storage can differ across the ecosystem, making this information difficult to consume.

This library provides a unified interface for accessing this metadata and ensuring that it can be consumed consistently.

Support

This library supports pulling metadata from the following formats:

Usage

go-imageinspect is intended to be used as a library. However, for development purposes, a simple command line tool is provided for prototyping:

$ docker buildx bake bin
$ ./bin/imageinspect moby/buildkit:latest

Contributing

Want to contribute? Awesome! You can find information about contributing to this project in the CONTRIBUTING.md