File tree Expand file tree Collapse file tree 2 files changed +4
-8
lines changed Expand file tree Collapse file tree 2 files changed +4
-8
lines changed Original file line number Diff line number Diff line change 11name : Generate SBOM with OSV-Scanner and load into ScanCode.io
22
33# This workflow:
4- # 1. Generates a CycloneDX SBOM for a container image using OWASP dep-scan .
4+ # 1. Generates a CycloneDX SBOM for a container image using OSV-Scanner .
55# 2. Uploads the SBOM as a GitHub artifact for future inspection.
66# 3. Loads the SBOM into ScanCode.io for further analysis.
77# 4. Runs assertions to verify that the SBOM was properly processed in ScanCode.io.
1313 schedule :
1414 # Run once a week (every 7 days) at 00:00 UTC on Sunday
1515 - cron : " 0 0 * * 0"
16- pull_request :
17- push :
18- branches :
19- - main
2016
2117permissions :
2218 contents : read
Original file line number Diff line number Diff line change @@ -376,10 +376,10 @@ are actively supported and tested::
376376 - Anchore: https://anchore.com/sbom/
377377 - CycloneDX cdxgen: https://cyclonedx.github.io/cdxgen/
378378 - OWASP dep-scan: https://owasp.org/www-project-dep-scan/
379- - SBOM tool: https://github.com/microsoft/sbom-tool
380- - Trivy: https://trivy.dev/latest/
379+ - SBOM tool: https://github.com/microsoft/sbom-tool/
380+ - Trivy: https://trivy.dev/
381381 - OSV-Scanner: https://osv.dev/
382382
383383.. note :: Imported SBOMs must follow the SPDX or CycloneDX standards, in JSON format.
384- You can use the ``load-sbom `` pipeline to process and enhance these SBOMs in your
384+ You can use the ``load_sbom `` pipeline to process and enhance these SBOMs in your
385385 ScanCode.io projects.
You can’t perform that action at this time.
0 commit comments