Create SBOM using github action in workflow

[perifitdevs]

If you are looking for help, please confirm the following...

• I confirm I have searched the Docs, Codemagic Sample Projects, and GitHub Discussions.
• I confirm the software versions on my local computer match the ones in CI environment (e.g. Xcode version, Gradle version). See here
• I confirm I am able to do a fresh clone of the repository and build the project on my local computer.

Which mobile framework are you using?

React Native

Steps to reproduce

Hello,
I've been trying to create SBOM (Software Bill of Materials) using github action anchore/sbom-action@v0 (https://github.com/anchore/sbom-action) in workflow:

workflows:
    build-sbom:
        name: Create SBOM
        uses: anchore/sbom-action@v0
        with:
            path: ./
            format: spdx
            artifact-name: myapp.spdx

But it seems that's not enough to make it work, I got below error when running it from Codemagic:
invalid configuration: 2 validation errors for YamlConfiguration workflows -> build-sbom -> uses extra fields not permitted (type=value_error.extra) workflows -> build-sbom -> with extra fields not permitted (type=value_error.extra)

I'm a newbie with Codemagic.
Can anybody help on this ?

Thanks and Best Regards

Expected results

I expect it can run the github action without error.

Actual results

I got below error when running it from Codemagic:
invalid configuration: 2 validation errors for YamlConfiguration workflows -> build-sbom -> uses extra fields not permitted (type=value_error.extra) workflows -> build-sbom -> with extra fields not permitted (type=value_error.extra)

Build id (optional)

No response

[himesh-cm]

Hi @perifitdevs, Please note that the GitHub Actions script won't work as is in codemagic.yaml file. Please check the documentation here on using codemagic.yaml configuration for your workflows.

Regarding the implementation of SBOM, you can directly follow the instruction process mentioned on their GitHub repo here by defining the scripts in the codemagic.yaml file, you can find a few examples here for reference.

[perifitdevs]

Thanks a lot @himesh-cm !

[himesh-cm]

Happy to help
While I’m closing our discussion for now, if you have any other questions or suggestions, feel free to reply back or start a new discussion anytime. Have a nice day!