We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 03f766b commit e89d471Copy full SHA for e89d471
.github/workflows/test-sbom.yml
@@ -47,21 +47,21 @@ jobs:
47
platforms: linux/arm64/v8,linux/amd64
48
load: true
49
50
- - name: Generate SBOM with Syft
+ - name: Syft
51
uses: anchore/sbom-action@v0
52
with:
53
image: ${{ fromJSON(steps.meta.outputs.tags)[0] }}
54
format: spdx-json
55
output-file: sbom.spdx.json
56
57
- - name: Scan for vulnerabilities with Grype
+ - name: GRYPE
58
uses: anchore/scan-action@v3
59
60
61
output-file: vulnerabilities.json
62
fail-on-severity: high
63
64
- - name: Upload security reports as artifacts
+ - name: Upload arti
65
uses: actions/upload-artifact@v4
66
67
name: security-reports
0 commit comments