generate_sbom
Generate a Software Bill of Materials for a Docker image using Trivy, listing all OS packages and language dependencies for supply-chain compliance and license audits. Requires Trivy CLI installed.
Instructions
Generates a Software Bill of Materials (SBOM) for a Docker image using
Trivy — a full inventory of every OS package and language dependency the
image contains. Useful for supply-chain compliance, license audits, and
tracking exposure when a new CVE is disclosed (search the SBOM instead of
re-scanning). Requires the trivy CLI installed and on PATH
(https://trivy.dev).
Args: image: image to generate an SBOM for, e.g. "nginx:latest" or "my-app:v1" format: SBOM format, "cyclonedx" (default) or "spdx-json"
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"image": "<image>"
},
"name": "generate_sbom"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| image | Yes | ||
| format | No | cyclonedx |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |