Skip to main content

SbomConfig

Struct SbomConfig 

Source
pub struct SbomConfig {
    pub id: Option<String>,
    pub cmd: Option<String>,
    pub env: Option<Vec<String>>,
    pub args: Option<Vec<String>>,
    pub documents: Option<Vec<String>>,
    pub artifacts: Option<String>,
    pub ids: Option<Vec<String>>,
    pub skip: Option<StringOrBool>,
}

Fields§

§id: Option<String>

Unique identifier for this SBOM config (default: “default”).

§cmd: Option<String>

Command to run for SBOM generation (default: “syft”).

§env: Option<Vec<String>>

Environment variables to pass to the command, as KEY=VALUE strings. Order is preserved. Values are template-rendered before being set.

§args: Option<Vec<String>>

Command-line arguments (supports templates and $artifact, $document vars).

§documents: Option<Vec<String>>

Output document path templates (supports templates).

§artifacts: Option<String>

Which artifacts to catalog: “source”, “archive”, “binary”, “package”, “diskimage”, “installer”, “any” (default: “archive”).

§ids: Option<Vec<String>>

Filter by artifact IDs (ignored if artifacts=“source”).

§skip: Option<StringOrBool>

Skip this SBOM config. Accepts bool or template string.

Implementations§

Source§

impl SbomConfig

Source

pub const DEFAULT_ID: &'static str = "default"

Default id when an SBOM config has none. Mirrors GoReleaser internal/pipe/sbom/sbom.go (cfg.ID = "default").

Source

pub const DEFAULT_CMD: &'static str = "syft"

Default SBOM-generation command. Mirrors GoReleaser sbom.go (cfg.Cmd = "syft").

Source

pub const DEFAULT_ARTIFACTS: &'static str = "archive"

Default artifacts filter. Mirrors GoReleaser sbom.go (cfg.Artifacts = "archive").

Source

pub const DEFAULT_DOCUMENT_BINARY: &'static str = "{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}.sbom.json"

Default document-path template when artifacts: binary. Includes per-target Os/Arch suffix so per-arch SBOMs don’t collide. Mirrors GoReleaser sbom.go.

Source

pub const DEFAULT_DOCUMENT_OTHER: &'static str = "{{ .ArtifactName }}.sbom.json"

Default document-path template for any non-binary, non-any artifacts: filter. Mirrors GoReleaser sbom.go.

Source

pub const DEFAULT_SYFT_ARGS: &[&'static str]

Default args for the syft command. Mirrors GoReleaser sbom.go. Anodize matches GR’s shell-style $artifact / $document placeholders verbatim — the arg-renderer rewrites these to per-artifact values at execution time.

Source

pub const DEFAULT_SYFT_ENV_KEY: &'static str = "SYFT_FILE_METADATA_CATALOGER_ENABLED"

Env entry that syft requires to emit file paths in the SBOM when cataloging archives or source. Mirrors GoReleaser sbom.go.

Source

pub const DEFAULT_SYFT_ENV_VAL: &'static str = "true"

Source

pub fn resolved_id(&self) -> &str

Resolve the SBOM-config id, falling back to "default".

Source

pub fn resolved_cmd(&self) -> &str

Resolve the SBOM command, falling back to "syft".

Source

pub fn resolved_artifacts(&self) -> &str

Resolve the artifacts: filter, falling back to "archive".

Source

pub fn resolved_documents(&self, artifacts: &str) -> Vec<String>

Resolve documents, falling back to the artifact-type-specific default when unset. Caller should pass the result of Self::resolved_artifacts for artifacts.

Source

pub fn resolved_args(&self, cmd: &str) -> Vec<String>

Resolve args, falling back to Self::DEFAULT_SYFT_ARGS when cmd is "syft"; empty vec otherwise (matches GoReleaser: sbom.go only initializes args when cmd is syft, and leaves args empty for other cmds).

Source

pub fn default_syft_env_for(cmd: &str, artifacts: &str) -> Vec<(String, String)>

Default env additions for the syft sub-process. Empty unless cmd is syft AND artifacts is source/archive — in which case syft needs the file-metadata cataloger enabled to produce file paths in the SBOM. Mirrors GoReleaser sbom.go.

Trait Implementations§

Source§

impl Clone for SbomConfig

Source§

fn clone(&self) -> SbomConfig

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for SbomConfig

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Default for SbomConfig

Source§

fn default() -> SbomConfig

Returns the “default value” for a type. Read more
Source§

impl<'de> Deserialize<'de> for SbomConfig

Source§

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>
where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer. Read more
Source§

impl JsonSchema for SbomConfig

Source§

fn schema_name() -> String

The name of the generated JSON Schema. Read more
Source§

fn schema_id() -> Cow<'static, str>

Returns a string that uniquely identifies the schema produced by this type. Read more
Source§

fn json_schema(generator: &mut SchemaGenerator) -> Schema

Generates a JSON Schema for this type. Read more
Source§

fn is_referenceable() -> bool

Whether JSON Schemas generated for this type should be re-used where possible using the $ref keyword. Read more
Source§

impl Serialize for SbomConfig

Source§

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>
where __S: Serializer,

Serialize this value into the given Serde serializer. Read more

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
Source§

impl<T> DynClone for T
where T: Clone,

Source§

fn __clone_box(&self, _: Private) -> *mut ()

Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T> Instrument for T

Source§

fn instrument(self, span: Span) -> Instrumented<Self>

Instruments this type with the provided Span, returning an Instrumented wrapper. Read more
Source§

fn in_current_span(self) -> Instrumented<Self>

Instruments this type with the current Span, returning an Instrumented wrapper. Read more
Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Pointable for T

Source§

const ALIGN: usize

The alignment of pointer.
Source§

type Init = T

The type for initializers.
Source§

unsafe fn init(init: <T as Pointable>::Init) -> usize

Initializes a with the given initializer. Read more
Source§

unsafe fn deref<'a>(ptr: usize) -> &'a T

Dereferences the given pointer. Read more
Source§

unsafe fn deref_mut<'a>(ptr: usize) -> &'a mut T

Mutably dereferences the given pointer. Read more
Source§

unsafe fn drop(ptr: usize)

Drops the object pointed to by the given pointer. Read more
Source§

impl<T> PolicyExt for T
where T: ?Sized,

Source§

fn and<P, B, E>(self, other: P) -> And<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow only if self and other return Action::Follow. Read more
Source§

fn or<P, B, E>(self, other: P) -> Or<T, P>
where T: Policy<B, E>, P: Policy<B, E>,

Create a new Policy that returns Action::Follow if either self or other returns Action::Follow. Read more
Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
Source§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

Source§

fn vzip(self) -> V

Source§

impl<T> WithSubscriber for T

Source§

fn with_subscriber<S>(self, subscriber: S) -> WithDispatch<Self>
where S: Into<Dispatch>,

Attaches the provided Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

fn with_current_subscriber(self) -> WithDispatch<Self>

Attaches the current default Subscriber to this type, returning a WithDispatch wrapper. Read more
Source§

impl<T> DeserializeOwned for T
where T: for<'de> Deserialize<'de>,