Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enhance specifying the mandatory "platform" arg for multi arch images #419

Closed
saisatishkarra opened this issue Jun 8, 2023 · 1 comment · Fixed by #418
Closed

Enhance specifying the mandatory "platform" arg for multi arch images #419

saisatishkarra opened this issue Jun 8, 2023 · 1 comment · Fixed by #418
Assignees

Comments

@saisatishkarra
Copy link

Syft version after 0.75 fails to generate SBOM for multi-arch images and requires explicitly specifying the --platform option even when using the SHA specific to architecture.

Enhance specifying the --platform option when scanning images as an input arg to the Syft arguments.

New Feature PR on Syft that is causing the problem: anchore/syft#1801

How to reproduce:

Syft packages -v image:tag@sha256:<any-non-amd64-arch> -o spdx-json > sbom.spdx.json 
Error: * failed to construct source from user input image:tag could not fetch image: unable to use DockerDaemon source: image has unexpected architecture "arm64", which differs from the user-specified architecture "amd64
@willmurphyscode
Copy link
Contributor

Thanks for opening this issue! The underlying issue in stereoscope has been fixed, see anchore/stereoscope#188. Once we do a syft release that pulls in the stereoscope fix, probably early next week, this issue should be fixed as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging a pull request may close this issue.

2 participants