Skip to content

Commit 4093f1d

Browse files
test sbom
1 parent 0ee5e2c commit 4093f1d

File tree

1 file changed

+24
-0
lines changed

1 file changed

+24
-0
lines changed

.github/workflows/sbom.yml

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
name: Add SBOM to Release
2+
on:
3+
release:
4+
types: [published]
5+
6+
jobs:
7+
upload-sbom:
8+
runs-on: ubuntu-latest
9+
steps:
10+
- name: Checkout code
11+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
12+
13+
- name: Generate SBOM
14+
uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c
15+
with:
16+
path: .
17+
18+
- name: Upload SBOM to release
19+
uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5
20+
with:
21+
upload_url: ${{ github.event.release.upload_url }}
22+
asset_path: sbom.json
23+
asset_name: sbom.json
24+
asset_content_type: application/json

0 commit comments

Comments
 (0)