From 604ca564719ce6f94ad3c4aaeab2e23245e2561b Mon Sep 17 00:00:00 2001 From: dervoeti Date: Fri, 30 May 2025 15:04:26 +0200 Subject: [PATCH] feat: add a note about included source code --- modules/guides/pages/viewing-and-verifying-sboms.adoc | 2 ++ 1 file changed, 2 insertions(+) diff --git a/modules/guides/pages/viewing-and-verifying-sboms.adoc b/modules/guides/pages/viewing-and-verifying-sboms.adoc index 7338a8413..6e623c19c 100644 --- a/modules/guides/pages/viewing-and-verifying-sboms.adoc +++ b/modules/guides/pages/viewing-and-verifying-sboms.adoc @@ -4,6 +4,8 @@ With release 24.3 of SDP, we started providing SBOMs (Software Bill of Materials) for our container images. Please note that they currently are in a draft stage and we are continually working on improving them. As a first step, we aim to provide a list of all primary (top level) components and their versions included in each container image. Our SBOMs follow the https://cyclonedx.org/[CycloneDX] standard and are available in JSON format. +NOTE: Starting with SDP 25.7, we now embed the exact source code used to build each product directly into our images. You can find the source code in files ending with `-src.tar.gz` within the `/stackable` directory of each image. + You can browse through our SBOMs at https://sboms.stackable.tech/. You will find a simple hierarchical structure, one directory per release, containing a list of all container images included in that release. For each container image, one SBOM per version of the image is listed.