RPM Build Dependencies Package

Checks different properties of the CycloneDX SBOMs associated with the image being validated.

Package Name

  • rpm_build_deps

Rules Included

Builds have valid download locations

Builds have valid download locations for RPM build dependencies

  • Rule type: WARNING

  • WARNING message: RPM build dependency source %s is not in the allowed list %v.

  • Code: rpm_build_deps.download_location_valid

  • Source

allowed_rpm_build_dependency_sources format

Confirm the allowed_rpm_build_dependency_sources rule data uses anchored regex patterns.

  • Rule type: FAILURE

  • FAILURE message: %s

  • Code: rpm_build_deps.allowed_rpm_build_dependency_sources_format

  • Source