Support for SBOM generation
Metadata
Current evaluation
Feature request to add a create_sbom option to imagecraft.yaml and emit an SBOM build artifact for CPC images; it is unlabelled, has no maintainer response, and no implementation is present.
Suggested action: needs triage
Reason: The request is clearly motivated, names a proposed create_sbom: true configuration key, and cites livecd-rootfs support and CPC's soft requirement. However, it has no labels or maintainer comments and lacks design details such as the SBOM format, generation tool, and artifact location; repository inspection found no SBOM implementation or related commit.
Evaluated by: mr-cal-bot
Impact:
55
Quick Win:
13
Complexity:
62
Confidence:
82
Actionability:
60
Issue body
### Check existing issues
- [x] I've verified that this request isn't described by any existing issues.
### Request
I would like to be able to define something like `create_sbom: true` in the imagecraft.yaml and have an SBOM generated as a build artifact
### The problem it solves
Existing livecd-rootfs builds have support for SBOM generation (see [here](https://git.launchpad.net/livecd-rootfs/tree/live-build/functions#n65)). This is a soft requirement for cpc builds, and being able to do it without the use of overlay scripts would be much clearer.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha |
Impact:
55
Quick Win:
13
Complexity:
62
Confidence:
82
Actionability:
60
|
needs triage | Feature request to add a create_sbom option to imagecraft.yaml and emit an SBOM build artifact for CPC images; it is unlabelled, has no maintainer response, and no implementation is present. | |
| qwen/qwen3.6-35b-a3b |
Impact:
45
Quick Win:
12
Complexity:
55
Confidence:
75
Actionability:
60
|
needs triage | Feature request to add SBOM generation support via a `create_sbom: true` option in imagecraft.yaml. No implementation exists in the codebase. Issue is unlabelled with no maintainer response. | |
| qwen/qwen3.8-27b |
Impact:
45
Quick Win:
20
Staleness:
70
Complexity:
55
Confidence:
78
Support Request:
25
|
needs triage | Feature request to add SBOM generation support (create_sbom option) to imagecraft.yaml for CPC build compliance. No labels, no comments, no maintainer engagement in 186 days. No SBOM-related code exists in the codebase. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
55
Complexity:
45
Confidence:
85
Support Request:
15
|
needs triage | Feature request to enable SBOM generation via imagecraft.yaml configuration. Unlabelled, zero comments, and inactive for ~5 months with no maintainer response. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
75
Complexity:
45
Confidence:
90
Support Request:
10
|
needs triage | Feature request to add native SBOM generation via a create_sbom config option in imagecraft.yaml, replacing overlay scripts. Currently unlabelled and inactive for 131 days. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
65
Complexity:
45
Confidence:
85
Support Request:
10
|
needs triage | Feature request to add create_sbom config option in imagecraft.yaml for generating SBOM build artifacts. Unlabelled, zero comments, inactive for 128 days. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.