Hi,
for a customer we need a SBOM (Software Bill o...
# generaln
nutritious-intern-6999
11/05/2025, 12:54 PMHi,
for a customer we need a SBOM (Software Bill of Materials) for rke2 (and k3s). Where can I find that?
Greetings,
Josef
m
melodic-flag-78037
11/05/2025, 8:06 PMHi Josef. I didn't find RKE2 so that may require a ticket on the customer's behalf but did find K3s in the app collection:
https://apps.rancher.io/applications/k3s
Customer with a Prime or above entitlement have access to this collection.
melodic-flag-78037
11/05/2025, 8:22 PMI need to add a caveat to the URL above - that's the customer rebuild. If they have Prime then use that image
melodic-flag-78037
11/05/2025, 8:26 PMI pinged some folks internally @ SUSE & a dev came back with this for RKE2 (requires an active Prime account):
Copy code
docker buildx imagetools inspect <http://registry.rancher.com/rancher/rke2-runtime:v1.34.1-rke2r1|registry.rancher.com/rancher/rke2-runtime:v1.34.1-rke2r1> --format '{{ json (index .SBOM "linux/amd64").SPDX }}' | grep spdxVersion
"spdxVersion": "SPDX-2.3"✅ 1
👍 1
n
nutritious-intern-6999
11/06/2025, 12:47 PMThank you, Kelly!
🙏 1
28 Views