fix(sbom): skip executable file analysis if Rekor isn't a specified S…

…BOM source (#6163)
aquasecurity · Feb 20, 2024 · 7694df1 · 7694df1
1 parent 74dc5b6
commit 7694df1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/pkg/commands/artifact/run.go b/pkg/commands/artifact/run.go
@@ -514,7 +514,8 @@ func disabledAnalyzers(opts flag.Options) []analyzer.Type {
 		analyzers = append(analyzers, analyzer.TypeHistoryDockerfile)
 	}
 
-	if len(opts.SBOMSources) == 0 {
+	// Skip executable file analysis if Rekor isn't a specified SBOM source.
+	if !slices.Contains(opts.SBOMSources, types.SBOMSourceRekor) {
 		analyzers = append(analyzers, analyzer.TypeExecutable)
 	}