We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 0ee5e2c commit 4093f1dCopy full SHA for 4093f1d
.github/workflows/sbom.yml
@@ -0,0 +1,24 @@
1
+name: Add SBOM to Release
2
+on:
3
+ release:
4
+ types: [published]
5
+
6
+jobs:
7
+ upload-sbom:
8
+ runs-on: ubuntu-latest
9
+ steps:
10
+ - name: Checkout code
11
+ uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8
12
13
+ - name: Generate SBOM
14
+ uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c
15
+ with:
16
+ path: .
17
18
+ - name: Upload SBOM to release
19
+ uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5
20
21
+ upload_url: ${{ github.event.release.upload_url }}
22
+ asset_path: sbom.json
23
+ asset_name: sbom.json
24
+ asset_content_type: application/json
0 commit comments