Skip to content

Add native-image-utils tool#13394

Open
jerboaa wants to merge 1 commit intooracle:masterfrom
jerboaa:integrate-native-image-utils-master
Open

Add native-image-utils tool#13394
jerboaa wants to merge 1 commit intooracle:masterfrom
jerboaa:integrate-native-image-utils-master

Conversation

@jerboaa
Copy link
Copy Markdown
Collaborator

@jerboaa jerboaa commented Apr 23, 2026

Summary

This tool relies on a native library, libextract_sbom.a, produced by the build, which is currently Linux only and allows for the native-image-utils launcher to be produced. It can be optionally produced by running the macro - native-image-utils-launcher - to read the gzip compressed SBOM bytes from another native image.

Related Issues

Implementation of #13374

Testing

  • SBOM extraction on a native image produced with Oracle GraalVM
  • SBOM extraction on a patched build of Mandrel 25 which embeds a Quarkus SBOM.

Basic Usage:

  1. Build GraalVM
  2. Run the macro native-image --macro:native-image-utils-launcher
  3. $GRAALVM_HOME/bin/native-image-utils extract-sbom --image-path=/path/to/binary-with-sbom-embedded

Assisted-by: Claude, Model: Sonnet 4.5

This tool relies on a native library, libextract_sbom.a, which is
currently Linux only and allows for the native-image-utils launcher,
provided with a macro - native-image-utils-launcher - to read the gzip
compressed SBOM bytes from another native image.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant