We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent ccadd89 commit 9e1c26cCopy full SHA for 9e1c26c
.github/workflows/multi-env-build-push-deploy.yml
.github/workflows/sbom.yml
@@ -0,0 +1,30 @@
1
+name: Generate SBOM
2
+
3
+on:
4
+ push:
5
+ branches:
6
+ - feature/workshopWorkflows
7
8
+jobs:
9
+ build-sbom:
10
+ runs-on: ubuntu-latest
11
+ permissions:
12
+ actions: read
13
+ contents: write
14
+ steps:
15
+ - name: Checkout code
16
+ uses: actions/checkout@v4
17
18
+ - name: Set up JDK 21
19
+ uses: actions/setup-java@v4
20
+ with:
21
+ distribution: 'zulu'
22
+ java-version: '21'
23
24
+ - name: Build JAR file
25
+ run: mvn clean package -Dmaven.test.skip
26
27
+ - uses: anchore/sbom-action@v0
28
29
+ path: ./build/
30
+ artifact-name: sbom.spdx
0 commit comments