Skip to content

Conversation

@wlynch
Copy link
Member

@wlynch wlynch commented Jan 8, 2026

SBOM generators took in an SBOM at initialization, but also at Generate time. This meant there could be 2 different filesystems, but it was also unclear why we needed to have the filesystem at init time anyway, since it means that generators had to be tied 1:1 to their filesystems instead of reused for multiple files systems.

In practice, these were the same filesystem being plumbed at 2 different places. This simplifies this so that we only use the Generate-time FS which makes the most sense.

BREAKING CHANGE:

  • SBOM Generators no longer take a filesystem at init time. The filesystem passed in through the SBOM options at generation time is used.

SBOM generators took in an SBOM at initialization, but also at Generate time.
This meant there could be 2 different filesystems, but it was also unclear why
we needed to have the filesystem at init time anyway, since it means that generators
had to be tied 1:1 to their filesystems instead of reused for multiple files systems.

In practice, these were the same filesystem being plumbed at 2 different places.
This simplifies this so that we only use the Generate-time FS which makes the most sense.

BREAKING CHANGE:

- SBOM Generators no longer take a filesystem at init time. The filesystem passed in through the SBOM
  options at generation time is used.
@wlynch wlynch requested a review from markusthoemmes January 8, 2026 15:54
@wlynch wlynch merged commit 0ed614c into chainguard-dev:main Jan 8, 2026
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants