helm

func GenerateChartSBOM ¶

func GenerateChartSBOM(chartPath, outputPath string, images []string, files piperutils.FileUtils) error

GenerateChartSBOM builds a chart-level CycloneDX SBOM (bom-helm.xml) that describes the helm chart artifact itself: the chart as the root component (with a pkg:helm PURL), its sub-chart dependencies, and the referenced container images. Unlike the container-image SBOMs, this is hand-built with the CycloneDX library since Syft has no helm-chart support.