DEBUG workflow

Signed-off-by: tdruez <[email protected]>

Author: tdruez

.github/workflows/sca-integration-osv.yml

@@ -37,17 +37,17 @@ jobs:
       - name: Run OSV Scanner
         run: |
           osv-scanner scan --help
-          osv-scanner scan image alpine:3.17.0 --all-packages --format spdx-2-3 --output sbom.spdx.json || true
+          osv-scanner scan image alpine:3.17.0 --all-packages --format spdx-2-3 --output sbom.spdx.json
 
 #      - name: Run OSV Scanner
 #        uses: docker://ghcr.io/google/osv-scanner-action:v2.2.1
 #        with:
 #          args: scan image --archive alpine_3.17.0.tar --format spdx-2-3 --all-packages > osv-scanner.spdx.json || true
 #          args: scan image --archive alpine_3.17.0.tar --format json
 
-#      - name: Upload SBOM as GitHub Artifact
-#        uses: actions/upload-artifact@v4
-#        with:
-#          name: osv-scanner-sbom-report
-#          path: osv-scanner.cdx.json
-#          retention-days: 20
+      - name: Upload SBOM as GitHub Artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: osv-scanner-sbom-report
+          path: sbom.spdx.json
+          retention-days: 20