scout_sbom
Generate a Software Bill of Materials (SBOM) for a Docker image in SPDX, CycloneDX, JSON, or list format. Specify image, platform, and format to retrieve component inventory.
Instructions
Generate a Software Bill of Materials (SBOM) for an image.
SBOMs can be large; captured stdout is subject to MAX_CLI_OUTPUT_BYTES and may be truncated for
big images. If that's a concern, run docker scout sbom -o file.json … on the host and load the
file separately.
args:
image - Image reference
format - SBOM format: "spdx" (default, SPDX JSON), "cyclonedx" (CycloneDX JSON),
"json" (Scout's native JSON), "list" (plain-text package list)
platform - Platform of the image to analyze
returns: dict - {"format", "result", "raw": }. result is a parsed dict when
format is "spdx"/"cyclonedx"/"json" and stdout parses cleanly; for "list" or a
parse failure it's the raw text.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| image | Yes | ||
| format | No | spdx | |
| platform | No |