Add parent images for containers

Use BUILD_TOOL_OF for multi-stage builds, and DESCENDANT_OF for direct ancestors.
RedHatProductSecurity · Sep 10, 2024 · 6bf3c6f · 6bf3c6f
1 parent 03bfce1
commit 6bf3c6f
Show file tree

Hide file tree

Showing 15 changed files with 1,572 additions and 1,245 deletions.
diff --git a/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json b/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_amd64.spdx.json
diff --git a/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json b/...ontainer_image/build/kernel-module-management-operator-container-1.1.2-25_arm64.spdx.json
diff --git a/...tainer_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json b/...tainer_image/build/kernel-module-management-operator-container-1.1.2-25_ppc64le.spdx.json
diff --git a/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json b/sbom/examples/container_image/build/ubi9-micro-container-9.4-6.1716471860_amd64.spdx.json
@@ -55,7 +55,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234c9baacaa21b078c71ddff1ba2f715b4b3d8c1e4f389800eb830d6b38"
+          "checksumValue": "abcd1234ce864d532a2ed306f1528139581c7402e736b47a61f3b5d8e09c3aa7"
         }
       ]
     },
@@ -77,7 +77,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234fc42ff99f192d49667afa2b0038b2f2f2112da2755c4a40816851e3f"
+          "checksumValue": "abcd12342907b5d08b11148995448cae08018a1b5c98040212d203a74c964d22"
         }
       ]
     },
@@ -99,7 +99,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234de972a66cc6196e862c81c08c9eb3c794b9541c794e3ca56076eb771"
+          "checksumValue": "abcd1234bc1621aa42aeb891195c660279a4a07cc76a292565bde7af9bde3fed"
         }
       ]
     },
@@ -121,7 +121,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234cdef8c616633561969573723d2b7b4e15b6e64ff5c0a928cba064d0f"
+          "checksumValue": "abcd1234610fd63534ef108815245b5293531779926181be46dc5a381d6684d2"
         }
       ]
     },
@@ -143,7 +143,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234819567ac70e9f34e0bf11c6aa33d1f3ce4ec3eb0230d84a7905a2e02"
+          "checksumValue": "abcd12345ba41d0dbfddae1daa354e2cc9f381af5a3fa2de9042308a9827a8d6"
         }
       ]
     },
@@ -165,7 +165,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234c48165abadf921acb45d763ae15ae3512aa05a4568f413d2f2c889cf"
+          "checksumValue": "abcd12346d2e055092e146f8cc32aad3e483cceb3110403146e82393a21d79aa"
         }
       ]
     },
@@ -187,7 +187,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234315c392e9c1c1de154edb81b102288a6e934d90079849572120e6a40"
+          "checksumValue": "abcd12349f35c19113831c136f8e2976905061a3994555f5256f445ab2791032"
         }
       ]
     },
@@ -209,7 +209,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12346045a309fe94a3d746bf13a2622d05967ebafe9aed905d1b4b0b6f58"
+          "checksumValue": "abcd1234b9c13ee2191f3a25ecd44f8706c3a5660b3e4d41e99e6d547e019d08"
         }
       ]
     },
@@ -231,7 +231,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123482812ec8cc77947b22f56064394074a6723b2621d0ff49302eead13e"
+          "checksumValue": "abcd1234a5f724ad24c5d7a2df1d3685f04657e3db14a2b98ba6a632c83c11da"
         }
       ]
     },
@@ -253,7 +253,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123448c7a9f01174a36f2d3e6e9b9cf1919aa33da06e3c18ca88848e3aa3"
+          "checksumValue": "abcd1234784518354862edf5a614966b27df8877e8d798bd99b7d0fd4b6f23c0"
         }
       ]
     },
@@ -275,7 +275,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234b02a68822011987b3338f8df66d332ba5b08e62be3092f21277c583c"
+          "checksumValue": "abcd1234c4348c02fd3a0f6ada053b85f9adb6a132599a46d02e38101a10b3c5"
         }
       ]
     },
@@ -297,7 +297,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12342071f5a3de9b00da400c9fd3b5bec65a6c3fbe9da88a515c65467d5c"
+          "checksumValue": "abcd1234d7d296dcac6245babeb5e50f1262ab40ee26af13c0a1bbea777b9371"
         }
       ]
     },
@@ -319,7 +319,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12344dc129a3c10c86d7a88330a7c0790e8145a852ed7aa4a42c35f38de2"
+          "checksumValue": "abcd1234097ceaa668a24db722d8f8ec8f7fe8fdbcc632ffb4867a6d3cc46a19"
         }
       ]
     },
@@ -341,7 +341,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234d0aa763934e19cc472cad3f960f009345d7b851ac0c6b5f24b514600"
+          "checksumValue": "abcd123422bb1c237fb43b862d16a3c4a5b4feae2b1cbc8dc84d7763da52b6c7"
         }
       ]
     },
@@ -363,7 +363,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123471e8843bbf10b8f1ae23d7355651d0acd48e5a5ffd99185a1089c67a"
+          "checksumValue": "abcd1234359b4d9159f389d0f1014742f251b9895444e054894090d65415db7e"
         }
       ]
     },
@@ -385,7 +385,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd12345ec9d01d6768932720d8cec96e5d824feeb58742b4c392a1f6f26af1"
+          "checksumValue": "abcd1234600ab2d887200aac3d38988adb7ec64df9379d23e208d25bb668449a"
         }
       ]
     },
@@ -407,7 +407,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234cdf931ff0b0f1480e4de10007f0687366e78bd08e21ac976bf98b6e2"
+          "checksumValue": "abcd1234308bae215632bac29ba8afc0273b104e16eceb362ac969a8e9c43fea"
         }
       ]
     },
@@ -429,7 +429,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234fffcf75228bdf2c9502b3599482b60488cb41ac4d6830f675cdbd42c"
+          "checksumValue": "abcd123489223cc53eb7326baee451af1f61edb1662c3e697061ab87838e84da"
         }
       ]
     },
@@ -451,7 +451,7 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd123429cda1cef679199902a4a66000daff9b36f48646517f13bb35521574"
+          "checksumValue": "abcd1234841ef70c0f17e39a763b023b92c355d3d54befae2e4d62caef4c5d4e"
         }
       ]
     },
@@ -473,9 +473,18 @@
       "checksums": [
         {
           "algorithm": "SHA256",
-          "checksumValue": "abcd1234095a002aeb8be2dc9ae9ca79d85e68f5958ce5522b588a3f19608392"
+          "checksumValue": "abcd1234eb8491debde55737a7c2311a18dbd540a7805dceba1c1e4b76e996e0"
         }
       ]
+    },
+    {
+      "SPDXID": "SPDXRef-parent-image-0-amd64",
+      "name": "ubi9:9.4-947_amd64",
+      "versionInfo": "NOASSERTION",
+      "supplier": "Organization: Red Hat",
+      "downloadLocation": "NOASSERTION",
+      "licenseDeclared": "NOASSERTION",
+      "externalRefs": []
     }
   ],
   "relationships": [
@@ -484,6 +493,11 @@
       "relationshipType": "DESCRIBES",
       "relatedSpdxElement": "SPDXRef-ubi9-micro-container-amd64"
     },
+    {
+      "spdxElementId": "SPDXRef-ubi9-micro-container-amd64",
+      "relationshipType": "DESCENDANT_OF",
+      "relatedSpdxElement": "SPDXRef-parent-image-0-amd64"
+    },
     {
       "spdxElementId": "SPDXRef-ubi9-micro-container-amd64",
       "relationshipType": "CONTAINS",