Skip to content

Commit de98bb3

Browse files
authored
Merge pull request akabarki76#13 from AKA-NETWORK/akabarki76-patch-1
Create sbom.yml
2 parents 7698297 + d9daeda commit de98bb3

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed

.github/workflows/sbom.yml

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
name: Generate SBOM
2+
on:
3+
release:
4+
types: [published]
5+
6+
jobs:
7+
cyclone-dx:
8+
runs-on: ubuntu-latest
9+
steps:
10+
- uses: actions/checkout@v4
11+
- name: Generate SBOM
12+
uses: CycloneDX/gh-action-node@v1
13+
with:
14+
output-format: "json"
15+
output-file: "bom.json"
16+
- name: Upload Artifact
17+
uses: actions/upload-artifact@v3
18+
with:
19+
name: sbom
20+
path: bom.json
21+
- name: Attach to Release
22+
uses: actions/upload-release-asset@v1
23+
env:
24+
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
25+
with:
26+
upload_url: ${{ github.event.release.upload_url }}
27+
asset_path: ./bom.json
28+
asset_name: "SBOM_${{ github.sha }}.json"

0 commit comments

Comments
 (0)