anchorectl generate
Generate analysis artifacts locally.
Every command on this page also accepts the global flags.
Subcommands
- generate analysis-bundle — Generate an analysis bundle from a source
generate analysis-bundle
Generate an analysis bundle from a source.
anchorectl generate analysis-bundle [command]
Subcommands
- generate analysis-bundle filesystem — Generate an analysis bundle (an uncompressed tar archive containing the SBOM) for a local filesystem directory
- generate analysis-bundle image — Run a full local analysis of a container image (SBOM, secrets, content search, file contents, manifests) and package the result set into an analysis bundle for later upload with
app version asset add analysis.
generate analysis-bundle filesystem
Generate an analysis bundle (an uncompressed tar archive containing the SBOM) for a local filesystem directory.
anchorectl generate analysis-bundle filesystem SOURCE [flags]
Arguments
| Argument | Description |
|---|---|
SOURCE | Path to the directory to analyze. |
Flags
| Flag | Type | Environment variable | Default | Required | Description |
|---|---|---|---|---|---|
-f, --output-file | string | ANCHORECTL_OUTPUT_FILE | "" | Yes | File to write the analysis bundle tar archive (uncompressed; typically named .tar). |
-o, --output | string | ANCHORECTL_FORMAT | syft-json | No | The SBOM format inside the bundle, options: cyclonedx-json, cyclonedx-xml, spdx-json, spdx-tag-value, syft-json. See Output Formats. |
--overwrite | bool | ANCHORECTL_OVERWRITE | false | No | Overwrite the output file if it exists. |
generate analysis-bundle image
Run a full local analysis of a container image (SBOM, secrets, content search, file contents, manifests) and package the result set into an analysis bundle for later upload with app version asset add analysis.
anchorectl generate analysis-bundle image IMAGE [flags]
Arguments
| Argument | Description |
|---|---|
IMAGE | The image reference to analyze. |
Flags
| Flag | Type | Environment variable | Default | Required | Description |
|---|---|---|---|---|---|
-f, --output-file | string | ANCHORECTL_OUTPUT_FILE | "" | Yes | Write the analysis bundle tar archive to this file. |
--from | string | ANCHORECTL_FROM | "" | No | The image source: registry (default), docker, podman, or docker-archive:<path> (docker and podman: if the image is not present in the daemon it is pulled from the registry). |
-o, --output | string | ANCHORECTL_FORMAT | text | No | The format to show the results. Allowable values: text, json. See Output Formats. |
--overwrite | bool | ANCHORECTL_OVERWRITE | false | No | Overwrite the output file if it exists. |
--platform | string | ANCHORECTL_PLATFORM | "" | No | Platform to analyze for multi-arch images, e.g. linux/amd64. |