sbom detection 2 #24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Once this repository is public, move this workflow to security-integrations | |
| name: Test ClickBOM Action | |
| on: [push] | |
| jobs: | |
| test_clickbom: | |
| name: Test ClickBOM Action | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| contents: read | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Configure AWS Credentials | |
| uses: aws-actions/configure-aws-credentials@v4 | |
| id: aws-creds | |
| with: | |
| role-to-assume: arn:aws:iam::576599896960:role/GitHubOpenIdConnect | |
| role-session-name: clickbom-test | |
| aws-region: us-east-1 | |
| - name: Test ClickBOM Action | |
| uses: ./ | |
| id: test_clickbom | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| aws-access-key-id: ${{ steps.aws-creds.outputs.aws-access-key-id }} | |
| aws-secret-access-key: ${{ steps.aws-creds.outputs.aws-secret-access-key }} | |
| s3-bucket: clickhouse-sbom | |
| s3-key: clickbom.json | |
| repository: ${{ github.repository }} |