@@ -2,6 +2,9 @@ name: Generate SBOMS
22
33on : [push]
44
5+ env :
6+ INPUTS_PATH : scancode-inputs
7+
58jobs :
69 generate-sboms :
710 runs-on : ubuntu-24.04
@@ -10,22 +13,23 @@ jobs:
1013 - name : Checkout code
1114 uses : actions/checkout@v4
1215
13- - name : Ensure scancode-inputs directory exists
14- run : mkdir -p scancode-inputs
16+ - name : Ensure INPUTS_PATH directory exists
17+ run : mkdir -p "${{ env.INPUTS_PATH }}"
1518
1619 - name : Build the Docker image from local Dockerfile
1720 run : docker build -t local-image .
1821
1922 - name : Run pip freeze inside the built Docker container
20- run : docker run --rm local-image pip freeze --all --exclude scancodeio > scancode-inputs /requirements.txt
23+ run : docker run --rm local-image pip freeze --all --exclude scancodeio > "${{ env.INPUTS_PATH }} /requirements.txt"
2124
2225 - name : Collect all .ABOUT files in the scancodeio/ directory
2326 run : |
24- mkdir -p scancode-inputs /about-files # Create the directory if it doesn't exist
25- find scancodeio/ -type f -name "*.ABOUT" -exec cp {} scancode-inputs /about-files/ \;
27+ mkdir -p "${{ env.INPUTS_PATH }} /about-files"
28+ find scancodeio/ -type f -name "*.ABOUT" -exec cp {} "${{ env.INPUTS_PATH }} /about-files/" \;
2629
2730 - name : Resolve the dependencies using ScanCode-action
2831 uses : nexB/scancode-action@main
2932 with :
3033 pipelines : " resolve_dependencies:DynamicResolver"
34+ inputs-path : ${{ env.INPUTS_PATH }}
3135 scancodeio-repo-branch : main
0 commit comments