hard20 pts · first answer countsdevsecopssbomcontainer-security

SBOM from source vs from the image

An SBOM generated from your repo lists 120 npm packages. An SBOM generated from the final container image lists 310 components. Which one better shows what runs in production, and why?

A.The source SBOM, since images add only harmless filesB.The image SBOM, as it includes OS packages and build outputC.Both are equal, and the count differs only by formatD.Neither, because SBOMs cannot list OS packages

Discussion 0

Join free to post in the discussion.

SBOM from source vs from the image

Discussion 0

Related questions