Aikido ExportSbom

Aikido ExportSbom
Certified
Export the SBOM/license report of an Aikido container repository

Downloads the license and package overview for a container image and stores it to internal storage. Fails with an actionable message if the container has no completed scan yet — run Scan first.

yaml
type: io.kestra.plugin.aikido.containers.ExportSbom

Examples

Export a container's SBOM in CycloneDX format

yaml
id: export_container_sbom
namespace: company.security

inputs:
  - id: container_id
    type: STRING

tasks:
  - id: export_sbom
    type: io.kestra.plugin.aikido.containers.ExportSbom
    clientId: "{{ secret('AIKIDO_CLIENT_ID') }}"
    clientSecret: "{{ secret('AIKIDO_CLIENT_SECRET') }}"
    containerId: "{{ inputs.container_id }}"
    format: SBOM

Properties

clientId *string

OAuth2 client ID

Client ID of an Aikido API client with the OAuth2 scopes required by the tasks and triggers being used (for example issues: read, repositories: write). Client credentials are created in the Aikido console under Settings > API access.

clientSecret *string

OAuth2 client secret

Client secret of the Aikido API client. Exchanged for a short-lived JWT Bearer token on first use (and transparently refreshed before it expires); never logged or included in error messages.

containerId *string

Container repository ID

baseUrl string

Defaulthttps://app.aikido.dev

Aikido API base URL

Base URL of the Aikido Security application for your account's region: https://app.aikido.dev (Europe, default), https://app.us.aikido.dev (United States), https://app.au.aikido.dev (Australia), or https://app.me.aikido.dev (Middle East). The OAuth2 token endpoint is derived from this same host, so a region override applies to both authentication and API calls.