update-sbom.sh
No OneTemporary
Actions

Authored By

Unknown

Size

1 KB

Referenced Files

None

Subscribers

None

update-sbom.sh
View Options

	#!/usr/bin/env bash

	set -euo pipefail

	SCRIPT_DIR=$(dirname "${BASH_SOURCE[0]}")
	ROOT_DIR=$(realpath "${SCRIPT_DIR}/../")
	PURLS_FILE="${ROOT_DIR}/purls.txt"
	registry="901841024863.dkr.ecr.us-east-1.amazonaws.com"

	trap 'rm -f "$PURLS_FILE"' EXIT

	# Generate purls file from stored versions
	"${SCRIPT_DIR}/generate-purls.sh" > "$PURLS_FILE"

	# Log in to the DevProd Platforms ECR registry that hosts silkbomb. Requires membership in the
	# devprod-platforms-ecr-users Okta group and an AWS SSO profile for the account; see
	# https://docs.devprod.prod.corp.mongodb.com/devprod-platforms-ecr#from-your-laptop
	profile="${DEVPROD_PLATFORMS_ECR_AWS_PROFILE:-ECRScopedAccess-901841024863}"
	aws ecr get-login-password --region us-east-1 --profile "$profile" \| docker login --username AWS --password-stdin "$registry"

	# Use silkbomb to update the sbom.json file
	docker run --platform="linux/amd64" -i --rm -v "${ROOT_DIR}:/pwd" \
	"${registry}/release-infrastructure/silkbomb:2.0" \
	update --sbom-in /pwd/sbom.json --purls /pwd/purls.txt --sbom-out /pwd/sbom.json