← Back to issue list

Support for SBOM generation

View original Github issue

Metadata

Project
imagecraft
Number
#280
Type
issue
State
open
Author
rthill91
Labels
—
Created
Updated
Closed
—

Current evaluation

Feature request to add SBOM generation support (create_sbom option) to imagecraft.yaml for CPC build compliance. No labels, no comments, no maintainer engagement in 186 days. No SBOM-related code exists in the codebase.

Suggested action: needs triage

Reason: The issue has zero labels, zero comments, and no maintainer response in 186 days. No SBOM-related code or commits exist in the imagecraft repository (grep and git log confirm this). The related charmcraft#1013 was closed as superseded, deferring to a separate initiative, but no corresponding work has been tracked in imagecraft. A maintainer needs to assess whether this is in scope and how it relates to the broader SBOM initiative.

Impact: 45 Quick Win: 20.25 Staleness: 70 Complexity: 55 Confidence: 78 Support Request: 25

Issue body

### Check existing issues - [x] I've verified that this request isn't described by any existing issues. ### Request I would like to be able to define something like `create_sbom: true` in the imagecraft.yaml and have an SBOM generated as a build artifact ### The problem it solves Existing livecd-rootfs builds have support for SBOM generation (see [here](https://git.launchpad.net/livecd-rootfs/tree/live-build/functions#n65)). This is a soft requirement for cpc builds, and being able to do it without the use of overlay scripts would be much clearer.

Evaluation history

Date Model Scores Action Summary
qwen/qwen3.8-27b
Impact: 45
Quick Win: 20.25
Staleness: 70
Complexity: 55
Confidence: 78
Support Request: 25
needs triage Feature request to add SBOM generation support (create_sbom option) to imagecraft.yaml for CPC build compliance. No labels, no comments, no maintainer engagement in 186 days. No SBOM-related code exists in the codebase.
qwen/qwen3.6-35b-a3b
Staleness: 55
Complexity: 45
Confidence: 85
Support Request: 15
needs triage Feature request to enable SBOM generation via imagecraft.yaml configuration. Unlabelled, zero comments, and inactive for ~5 months with no maintainer response.
qwen3.6-35b-a3b-mtp-q6
Staleness: 75
Complexity: 45
Confidence: 90
Support Request: 10
needs triage Feature request to add native SBOM generation via a create_sbom config option in imagecraft.yaml, replacing overlay scripts. Currently unlabelled and inactive for 131 days.
qwen3.6-35b-a3b-mtp-q6
Staleness: 65
Complexity: 45
Confidence: 85
Support Request: 10
needs triage Feature request to add create_sbom config option in imagecraft.yaml for generating SBOM build artifacts. Unlabelled, zero comments, inactive for 128 days.
qwen3.6-35b-a3b-mtp-q6
Staleness: 75
Complexity: 40
Confidence: 90
Support Request: 10
needs triage Add SBOM generation support via a create_sbom flag in imagecraft.yaml, replacing overlay scripts for CPC builds. Open for 109 days with zero comments. Requires triage and assignment.

Update history

No update history recorded yet.

Related work

  • Related To: charmcraft#1013 (confidence 70%)

    Same SBOM generation request in charmcraft, closed as superseded by a separate ongoing initiative. Suggests SBOM work is being tracked elsewhere in the craft ecosystem but no imagecraft-specific tracking exists yet.

Related issues

No related issues found above the similarity threshold.