File tree Expand file tree Collapse file tree 2 files changed +9
-3
lines changed
Expand file tree Collapse file tree 2 files changed +9
-3
lines changed Original file line number Diff line number Diff line change 4545 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
4646 SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
4747 run : ./gradlew build sonar --info
48-
49- - name : SBOM generation
50- run : ./gradlew cyclonedxDirectBom
48+
49+ - name : Upload artifacts
50+ uses : actions/upload-artifact@v4
51+ with :
52+ path : |
53+ build/reports/cyclonedx-direct/bom.json
54+ build/distributions/*
5155
5256 # NOTE: The Gradle Wrapper is the default and recommended way to run Gradle (https://docs.gradle.org/current/userguide/gradle_wrapper.html).
5357 # If your project does not have the Gradle Wrapper configured, you can use the following configuration to run Gradle with a specified version.
Original file line number Diff line number Diff line change @@ -44,6 +44,8 @@ tasks.cyclonedxDirectBom {
4444 projectType = Component.Type . APPLICATION
4545 includeConfigs = [" runtimeClasspath" ]
4646 licenseChoice = new LicenseChoice (licenses : [new License (name : " GPL-3.0-or-later" , url : " https://spdx.org/licenses/GPL-3.0-or-later.html" )])
47+ componentVersion = ' 0.3.0'
48+ xmlOutput. unsetConvention()
4749}
4850
4951jar {
You can’t perform that action at this time.
0 commit comments