SBOMbastic

A SBOM-centric security scanner for Kubernetes.

This is still being developed. For additional details, please refer to the RFC.

Development

Run tests

make test

Run the development environment with Tilt

Customize tilt-settings.yaml to your needs. A default StorageClass must be defined in your cluster for SQLite data persistence.

Run tilt:

tilt up

Run tilt with unified logs:

tilt up --stream

Follow controller logs:

tilt logs -f controller

Follow storage logs:

tilt logs -f storage

Follow worker logs:

tilt logs -f worker

Teardown the environment:

tilt down

Generate code

When you make changes to the CRDs in /api or rbac rules annotations, you need to regenerate the code.

make generate

Credits

The storage API server is based on the Kubernetes sample-apiserver project.