Skip to content

Docker SBOM plugin migration to Docker Scout#25098

Merged
crazy-max merged 1 commit into
docker:mainfrom
crazy-max:sbom-cli-deprecated
May 19, 2026
Merged

Docker SBOM plugin migration to Docker Scout#25098
crazy-max merged 1 commit into
docker:mainfrom
crazy-max:sbom-cli-deprecated

Conversation

@crazy-max
Copy link
Copy Markdown
Member

Description

This PR documents the discontinuation of the standalone Docker SBOM CLI plugin and directs users to docker scout sbom.

The Docker Scout SBOM page now includes a deprecation note and migration examples for common docker sbom workflows. The C++ supply-chain security guide now uses Docker Scout instead of the discontinued plugin.

The standalone plugin has been discontinued in favor of Docker Scout, so the docs should stop teaching new users to install or run docker sbom.

Related issues or tickets

Reviews

  • Technical review
  • Editorial review
  • Product review

@netlify
Copy link
Copy Markdown

netlify Bot commented May 19, 2026

Deploy Preview for docsdocker ready!

Name Link
🔨 Latest commit 979de85
🔍 Latest deploy log https://app.netlify.com/projects/docsdocker/deploys/6a0c5bdc2663db0008b3f7d0
😎 Deploy Preview https://deploy-preview-25098--docsdocker.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

@github-actions github-actions Bot added area/scout Relates to Docker Scout area/guides labels May 19, 2026
Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The migration from the deprecated docker sbom plugin to docker scout sbom is clean and well-executed. Both changed files are correct, commands use valid syntax, the deprecation callout uses correct GitHub-style shortcode, and internal links resolve correctly. No high or medium issues found.

Copy link
Copy Markdown
Member

@thaJeztah thaJeztah left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@crazy-max crazy-max marked this pull request as ready for review May 19, 2026 10:45
Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

All findings were investigated and verified clean. The migration from docker sbom to docker scout sbom is accurate and well-documented:

  • Format flags are correct: --format spdx and --format cyclonedx are confirmed valid by the CLI reference (data/cli/scout/docker_scout_sbom.yaml)
  • Install script URL: Uses Docker's official canonical install URL — consistent with Docker Scout's own documentation
  • Deprecation note: Clear and properly formatted using the [!NOTE] callout
  • Migration section: Comprehensive, with correct before/after command pairs for all common workflows
  • No vendored files touched
  • No missing redirects (this PR modifies existing pages, not removes/moves them)

Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟡 NEEDS ATTENTION

Two medium-severity content accuracy issues found in the migration documentation. No critical issues (no missing redirects, no vendored files touched, no broken markdown).

Comment thread content/guides/cpp/security.md
Comment thread content/manuals/scout/how-tos/view-create-sboms.md Outdated
Comment thread content/manuals/scout/how-tos/view-create-sboms.md Outdated
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
@crazy-max crazy-max force-pushed the sbom-cli-deprecated branch from 9c0817a to 979de85 Compare May 19, 2026 12:47
@crazy-max crazy-max requested a review from dvdksn May 19, 2026 13:08
Copy link
Copy Markdown

@docker-agent docker-agent left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

The PR cleanly migrates the C++ supply chain security guide from the deprecated docker sbom CLI plugin to docker scout sbom, and adds the plugin to the retired features page in retired.md. Changes are accurate, well-scoped, and consistent with Docker documentation conventions. No broken links, missing redirects for removed pages, or high/medium issues found.

@crazy-max crazy-max merged commit a51c30b into docker:main May 19, 2026
17 checks passed
@crazy-max crazy-max deleted the sbom-cli-deprecated branch May 19, 2026 13:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/guides area/scout Relates to Docker Scout

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants