diff --git a/Dockerfile b/Dockerfile index afb8239..753e6ff 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,7 +15,7 @@ COPY main.go main.go RUN CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -a -o insights-handler main.go # we pull the trivy binary from aquasec's alpine based image -FROM aquasec/trivy:0.48.0 as trivy +FROM aquasec/trivy:0.49.0 as trivy # Use distroless as minimal base image to package the insights-handler binary # Refer to https://github.com/GoogleContainerTools/distroless for more details diff --git a/go.mod b/go.mod index 0f10548..780cd6f 100644 --- a/go.mod +++ b/go.mod @@ -48,7 +48,7 @@ replace ( ) require ( - github.com/CycloneDX/cyclonedx-go v0.7.2-0.20230625092137-07e2f29defc3 + github.com/CycloneDX/cyclonedx-go v0.8.0 github.com/cheekybits/is v0.0.0-20150225183255-68e9c0620927 // indirect github.com/fsouza/go-dockerclient v1.7.3 // indirect github.com/minio/minio-go/v7 v7.0.21 diff --git a/go.sum b/go.sum index 10686dd..5b3412a 100644 --- a/go.sum +++ b/go.sum @@ -5,6 +5,8 @@ github.com/Azure/go-ansiterm v0.0.0-20170929234023-d6e3b3328b78/go.mod h1:LmzpDX github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/CycloneDX/cyclonedx-go v0.7.2-0.20230625092137-07e2f29defc3 h1:NqeV+ZMqpcosu0Xg2VW14Ru9ayBs/toe2oihS7sN6Xo= github.com/CycloneDX/cyclonedx-go v0.7.2-0.20230625092137-07e2f29defc3/go.mod h1:fGXSp1lCDfMQ8KR1EjxT4ewc5HHhGczRF2pWhLSWohs= +github.com/CycloneDX/cyclonedx-go v0.8.0 h1:FyWVj6x6hoJrui5uRQdYZcSievw3Z32Z88uYzG/0D6M= +github.com/CycloneDX/cyclonedx-go v0.8.0/go.mod h1:K2bA+324+Og0X84fA8HhN2X066K7Bxz4rpMQ4ZhjtSk= github.com/Khan/genqlient v0.6.0 h1:Bwb1170ekuNIVIwTJEqvO8y7RxBxXu639VJOkKSrwAk= github.com/Khan/genqlient v0.6.0/go.mod h1:rvChwWVTqXhiapdhLDV4bp9tz/Xvtewwkon4DpWWCRM= github.com/Microsoft/go-winio v0.4.16-0.20201130162521-d1ffc52c7331/go.mod h1:XB6nPKklQyQ7GC9LdcBEcBl8PF76WugXOPRXwdLnMv0= diff --git a/internal/handler/insightsParserFilter.go b/internal/handler/insightsParserFilter.go index 3991975..5db42a7 100644 --- a/internal/handler/insightsParserFilter.go +++ b/internal/handler/insightsParserFilter.go @@ -96,7 +96,7 @@ func processSbomInsightsData(h *Messaging, insights InsightsData, v string, apiC //log.Printf("Successfully decoded SBOM of image %s with %s, found %d for '%s:%s'", bom.Metadata.Component.Name, (*bom.Metadata.Tools)[0].Name, len(*bom.Components), resource.Project, resource.Environment) logger.Info("Successfully decoded SBOM", "image", bom.Metadata.Component.Name, - "fieldName", (*bom.Metadata.Tools)[0].Name, + "fieldName", (*bom.Metadata.Tools.Components)[0].Name, "Length", len(*bom.Components), )