All cdxgen container images would now included a signed BOM as an attachment. Use oras discover and pull commands to download these attachments as shown here.
What's Changed
Other Changes
- Build Ruby in a builder by @prabhu in #1790
- Attach cdx sboms to various images by @prabhu in #1793
- Sign the generated BOMs by @prabhu in #1794
- sbom signing attempt 2 by @prabhu in #1798
Full Changelog: v11.3.0...v11.3.1