Skip to content

Commit 680fe09

Browse files
committed
Debug GitHub workflow for OWASP dep-scan
Signed-off-by: tdruez <[email protected]>
1 parent 9ad9579 commit 680fe09

File tree

1 file changed

+3
-11
lines changed

1 file changed

+3
-11
lines changed

.github/workflows/sca-integration-depscan.yml

Lines changed: 3 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -11,21 +11,13 @@ permissions:
1111
contents: read
1212

1313
env:
14-
IMAGE_REFERENCE: "python:3.13.0-slim"
15-
# IMAGE_REFERENCE: "alpine:3.17.0"
14+
# IMAGE_REFERENCE: "python:3.13.0-slim"
15+
IMAGE_REFERENCE: "alpine:3.17.0"
1616

1717
jobs:
1818
generate-and-load-sbom:
1919
runs-on: ubuntu-24.04
2020
steps:
21-
# - name: Prepare writable reports directory
22-
# run: mkdir -p reports && chmod 777 reports
23-
24-
- name: Pull and save the Docker image
25-
run: |
26-
docker pull ${{ env.IMAGE_REFERENCE }}
27-
docker save --output docker-image.tar ${{ env.IMAGE_REFERENCE }}
28-
2921
- name: Install OWASP dep-scan
3022
run: |
3123
sudo npm install -g @cyclonedx/cdxgen
@@ -46,7 +38,7 @@ jobs:
4638
path: reports/
4739
retention-days: 20
4840

49-
- name: Uninstall dep-scan to avoid conflict in the Python env
41+
- name: Uninstall dep-scan to avoid conflicts in the Python env
5042
run: pip uninstall --yes owasp-depscan
5143

5244
- name: Import SBOM into ScanCode.io

0 commit comments

Comments
 (0)