sbom scan

Author: corneliusludmann

.github/workflows/build.yml

@@ -309,7 +309,6 @@ jobs:
           fi
 
           sboms_dir=$(mktemp -d)
-          leeway -v sbom export --with-dependencies --output-dir "$sboms_dir" -Dversion=$VERSION || true
           CI= leeway -v sbom export --with-dependencies --output-dir "$sboms_dir" \
             -Dversion=$VERSION \
             --docker-build-options network=host \
@@ -321,7 +320,15 @@ jobs:
             -DimageRepoBase=$IMAGE_REPO_BASE
 
           scans_dir=$(mktemp -d)
-          leeway -v sbom scan --with-dependencies --output-dir "$scans_dir" -Dversion=$VERSION
+          CI= leeway -v sbom scan --with-dependencies --output-dir "$scans_dir" \
+            -Dversion=$VERSION \
+            --docker-build-options network=host \
+            --max-concurrent-tasks 1 \
+            -DlocalAppVersion=$VERSION \
+            -DpublishToNPM="${PUBLISH_TO_NPM}" \
+            -DnpmPublishTrigger="${NPM_PUBLISH_TRIGGER}" \
+            -DpublishToJBMarketplace="${PUBLISH_TO_JBPM}" \
+            -DimageRepoBase=$IMAGE_REPO_BASE
 
           {
             echo "leeway_sboms_dir=$sboms_dir"