60 feat retrieve SBOM from image manifest if it exists

[GilbN]

New

• Adds methods for retrieving SBOM from manifest, will fall back to use syft if it fails.

  • make_sbom
  • get_sbom_syft
  • get_sbom_buildx_blob
  • parse_buildx_sbom
  • format_package_table

• Added tests for new methods.

  • test_parse_buildx_sbom
  • test_format_package_table
  • test_get_sbom_buildx_blob
  • test_make_sbom

Changed

• Moved repeating hardcoded values into enum classes.

  • CITests
  • CITestResult
  • CIReportResult
  • Platform

• Deprecated generate_sbom

[LinuxServer-CI]

I am a bot, here is the pushed image/manifest for this PR:

ghcr.io/linuxserver/lspipepr-ci:94587082-pkg-94587082-dev-376ec12146cf982d0a83e6434311903d776cc781-pr-66

[Copilot]

Pull Request Overview

This PR introduces a new SBOM (Software Bill of Materials) generation approach that attempts to retrieve SBOM data directly from image manifests using Docker buildx imagetools before falling back to the existing Syft-based method. The changes also refactor hardcoded strings into enum classes for better maintainability.

• Adds new SBOM generation methods that prioritize manifest-based retrieval over container scanning
• Introduces enum classes for CI test names, results, and platforms to replace hardcoded strings
• Deprecates the existing generate_sbom method in favor of the new make_sbom approach

Reviewed Changes

Copilot reviewed 5 out of 6 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
ci/ci.py	Core implementation of new SBOM methods and enum classes for better code organization
tests/test_ci.py	Updated tests to use new enum classes and added comprehensive test coverage for new SBOM methods
tests/sbom_buildx_formatted_blob.txt	Test fixture containing formatted SBOM output for validation
test_build.py	Updated to use new enum classes for consistent status handling
Dockerfile	Added docker-buildx-plugin dependency required for new SBOM functionality

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[LinuxServer-CI]

I am a bot, here is the pushed image/manifest for this PR:

ghcr.io/linuxserver/lspipepr-ci:94587082-pkg-94587082-dev-b94d2b209602aed3c6d568643ad0ac723c6d57b9-pr-66

[LinuxServer-CI]

I am a bot, here is the pushed image/manifest for this PR:

ghcr.io/linuxserver/lspipepr-ci:develop-94587082-pkg-94587082-dev-3cc85ec720522aeab2b5a60c31bd3500edcf5a8c-pr-66

[thespad]

Depends on linuxserver/docker-jenkins-builder#352 now so we can properly test across a range of images.

[LinuxServer-CI]

I am a bot, here is the pushed image/manifest for this PR:

ghcr.io/linuxserver/lspipepr-ci:develop-402c1905-pkg-402c1905-dev-694c0ddc2cf1f9338463a117a320844cb6a3b09d-pr-66