mock-sbom-generator - SBOM Generator plugin for mock
| Website: | https://github.com/rpm-software-management/mock/ |
|---|---|
| License: | GPL |
- Description:
Mock plugin that generates Software Bill of Materials (SBOM) in CycloneDX format for packages built with Mock. The SBOM provides detailed information about the build environment, source files, and resulting packages, optimized for security use cases and compatible with vulnerability scanners (Grype, Trivy, Snyk).
Packages
| mock-sbom-generator-1.1.0-1.fc44.noarch [49 KiB] |
Changelog
by scott@atomicorp.com - 1.1.0-1 (2025-11-26):
- Version 1.1.0: Build hardening metadata and expanded platform support - Added build hardening properties capture (FORTIFY, PIE, RELRO, LTO, FIPS mode) - Capture compiler/linker flags (optflags, hardening_cflags, global_cflags, global_ldflags) - Fixed python3_sitelib macro compatibility for EL8 and EL10 builds - Renamed hardening properties from mock:hardening:* to build:hardening:* for accuracy - Updated property naming to reflect build-time settings vs mock-specific metadata |
Package contents (click to display)
[f] /usr/share/doc/mock-sbom-generator/Plugin-SBOM.md
[f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.opt-1.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/sbom_generator.py |
| mock-sbom-generator-1.0.0-2.fc44.noarch [46 KiB] |
Changelog
by scott@atomicorp.com - 1.0-1 (2025-01-20):
- Version 1.0: Enhanced CycloneDX SBOM generation - Added comprehensive metadata.component with license, summary, and URL - Improved primary package detection for multi-package builds - Removed verbose source file properties from package components - Dependencies now only include runtime libraries/RPMs (not source code) - Enhanced RPM metadata in SBOM (buildhost, buildtime, sourcerpm, group, epoch, distribution) |
Package contents (click to display)
[f] /usr/share/doc/mock-sbom-generator/Plugin-SBOM.md
[f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.opt-1.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/sbom_generator.py |
| mock-sbom-generator-1.0.0-1.fc44.noarch [49 KiB] |
Changelog
by scott@atomicorp.com - 1.1.0-1 (2025-11-26):
- Version 1.1.0: Build hardening metadata and expanded platform support - Added build hardening properties capture (FORTIFY, PIE, RELRO, LTO, FIPS mode) - Capture compiler/linker flags (optflags, hardening_cflags, global_cflags, global_ldflags) - Fixed python3_sitelib macro compatibility for EL8 and EL10 builds - Renamed hardening properties from mock:hardening:* to build:hardening:* for accuracy - Updated property naming to reflect build-time settings vs mock-specific metadata |
Package contents (click to display)
[f] /usr/share/doc/mock-sbom-generator/Plugin-SBOM.md
[f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.opt-1.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/__pycache__/sbom_generator.cpython-314.pyc [f] /usr/lib/python3.14/site-packages/mockbuild/plugins/sbom_generator.py |