trivy-scan-sbom.sh

#!/usr/bin/env bash

REGISTRY="registry.access.redhat.com"
IMAGE="ubi9/ubi-minimal"
VERSION="9.3-1361.1699548032"

find="/"
replace="-"
SBOM_FILENAME="${IMAGE//$find/$replace}"

trivy sbom trivy.${SBOM_FILENAME}.sbom-cyclonedx.json -f cyclonedx > trivy.${SBOM_FILENAME}.vulnerabilities.json