2 years ago

Category: Software, Ubuntu, Docker, Jenkins, container, github

Since the U.S. White House released its Cybersecurity Executive Order earlier this year, calling on government agencies to improve their security, it’s become quite apparent that supply chain security is of paramount importance. One way to aid in this attempt is supplying what is called a Software Bill of Materials (SBOM).

To make this quick and painless, we’re going to do all of the installations with the help of Docker.

Figure 3: Installing all of the suggested plugins for Jenkins is just a click away.

And that’s all there is to using Jenkins and Syft to generate a Software Bill of Materials for your GitHub-hosted project.