Skip to content

Conversation

bluesentinelsec
Copy link
Contributor

@bluesentinelsec bluesentinelsec commented Sep 23, 2025

Summary

This PR resolves #101 in which the platform argument was not honored by the underlying business logic, causing scans of multi-arch images to fallback to the host runner CPU architecture, usually amd64.

Changes Made

  • The system now correctly passes the platform argument to the action's business logic when scanning multi-arch container images.

  • Updated all workflow references from v1.4.0 to v1.4.1

* added multi-arch image workflow

* disable scan validator

* debugging multi arch CICD

* added 'platform' argument to action.yml

* set action version to investigation branch

* test amd64 images

* test multi-arch matrix

* verify workaround

* Add multi-platform validation to prevent regression of platform argument

- Add validate_multi_platform_image_support.py script to validate SBOM architecture matches expected platform
- Update test_multi_arch_images.yml workflow to validate platform argument is correctly passed through to inspector-sbomgen

* re-enable inspector scan validation

* remove inspector-scan validator, not applicable

* remove boilerplate

* test action against multi-arch fix

* revert test workflows to v1.4.0

* remove emoji characters from console logs
@bluesentinelsec bluesentinelsec merged commit 00f556b into main Sep 23, 2025
23 checks passed
@bluesentinelsec bluesentinelsec deleted the v1.4.1 branch September 23, 2025 19:18
@bluesentinelsec bluesentinelsec restored the v1.4.1 branch September 23, 2025 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Not supporting multi arch build images
2 participants