RPM Packages Package

Rules used to verify different properties of specific RPM packages found in the SBOM of the image being validated.

Package Name

  • rpm_packages

Rules Included

Unique Version

Check if a multi-arch build has the same RPM versions installed across each different architecture. This check only applies for Image Indexes, aka multi-platform images. Use the non_unique_rpm_names rule data key to ignore certain RPMs.

  • Rule type: FAILURE

  • FAILURE message: Mismatched versions of the %q RPM were found across different arches. %s

  • Code: rpm_packages.unique_version

  • Source