Update sbom.sh
This commit is contained in:
@@ -6,6 +6,10 @@
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# Pad-definities voor Cron compatibiliteit
|
||||
export PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
|
||||
export DEBIAN_FRONTEND="noninteractive"
|
||||
|
||||
# 1. Configuratie & Mappenstructuur
|
||||
OUTPUT_DIR="/var/sbom_scans"
|
||||
TIMESTAMP=$(date +"%Y%m%d_%H%M%S")
|
||||
@@ -28,7 +32,6 @@ if ! command -v trivy &> /dev/null; then
|
||||
fi
|
||||
|
||||
# 3. Genereer gerichte CycloneDX SBOM
|
||||
# Volgens OWASP: Alleen relevante runtime packages (Python/Pip + DPKG)
|
||||
echo "[+] Scannen van Python omgeving, Odoo en OS pakketten..."
|
||||
|
||||
trivy fs / \
|
||||
@@ -48,7 +51,6 @@ if [ -s "${FINAL_SBOM_JSON}" ]; then
|
||||
echo " Componenten: ${TOTAL_COMPONENTS} (Compact & Overzichtelijk)"
|
||||
echo "=============================================================================="
|
||||
|
||||
# Snel inzicht in de top componenten via CLI zonder de JSON te hoeven openen
|
||||
echo ""
|
||||
echo "Snel overzicht van de eerste 5 gedetecteerde componenten:"
|
||||
jq -r '.components[0:5][] | " - \(.name) (\(.version // "bekende versie")) [\(.type)]"' "${FINAL_SBOM_JSON}" 2>/dev/null || true
|
||||
|
||||
Reference in New Issue
Block a user