Skip to content

Commit 1a15f87

Browse files
committed
Refine workflow
Signed-off-by: tdruez <[email protected]>
1 parent ff8d39b commit 1a15f87

File tree

2 files changed

+4
-8
lines changed

2 files changed

+4
-8
lines changed

.github/workflows/sca-integration-osv-scanner.yml

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: Generate SBOM with OSV-Scanner and load into ScanCode.io
22

33
# This workflow:
4-
# 1. Generates a CycloneDX SBOM for a container image using OWASP dep-scan.
4+
# 1. Generates a CycloneDX SBOM for a container image using OSV-Scanner.
55
# 2. Uploads the SBOM as a GitHub artifact for future inspection.
66
# 3. Loads the SBOM into ScanCode.io for further analysis.
77
# 4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
@@ -13,10 +13,6 @@ on:
1313
schedule:
1414
# Run once a week (every 7 days) at 00:00 UTC on Sunday
1515
- cron: "0 0 * * 0"
16-
pull_request:
17-
push:
18-
branches:
19-
- main
2016

2117
permissions:
2218
contents: read

docs/faq.rst

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -376,10 +376,10 @@ are actively supported and tested::
376376
- Anchore: https://anchore.com/sbom/
377377
- CycloneDX cdxgen: https://cyclonedx.github.io/cdxgen/
378378
- OWASP dep-scan: https://owasp.org/www-project-dep-scan/
379-
- SBOM tool: https://github.com/microsoft/sbom-tool
380-
- Trivy: https://trivy.dev/latest/
379+
- SBOM tool: https://github.com/microsoft/sbom-tool/
380+
- Trivy: https://trivy.dev/
381381
- OSV-Scanner: https://osv.dev/
382382

383383
.. note:: Imported SBOMs must follow the SPDX or CycloneDX standards, in JSON format.
384-
You can use the ``load-sbom`` pipeline to process and enhance these SBOMs in your
384+
You can use the ``load_sbom`` pipeline to process and enhance these SBOMs in your
385385
ScanCode.io projects.

0 commit comments

Comments
 (0)