eof

Author: oarbusi

scripts/compliance/augment-sbom.sh

@@ -16,4 +16,4 @@ docker run \
 	--sbom-in "/pwd/compliance/sbom.json" \
 	--repo "$KONDUKTO_REPO" \
 	--branch "$KONDUKTO_BRANCH_PREFIX" \
-	--sbom-out "/pwd/compliance/augmented-sbom-v${RELEASE_VERSION}-${DATE}.json"
+	--sbom-out "/pwd/compliance/augmented-sbom-v${RELEASE_VERSION}-${DATE}.json"

scripts/compliance/gen-purls.sh

@@ -14,4 +14,4 @@ PKG_JSON=package.json
 # Output all npm dependencies, devDependencies, and peerDependencies as PURLs to compliance/purls.txt
 yq -r --output-format json '.dependencies | to_entries | .[] |  "pkg:npm/" + .key + "@" + .value' $PKG_JSON > compliance/purls.txt
 yq -r --output-format json '.devDependencies | to_entries | .[] |  "pkg:npm/" + .key + "@" + .value' $PKG_JSON >> compliance/purls.txt
-yq -r --output-format json '.peerDependencies | to_entries | .[] |  "pkg:npm/" + .key + "@" + .value' $PKG_JSON >> compliance/purls.txt
+yq -r --output-format json '.peerDependencies | to_entries | .[] |  "pkg:npm/" + .key + "@" + .value' $PKG_JSON >> compliance/purls.txt

scripts/compliance/gen-sbom.sh

@@ -7,5 +7,4 @@ docker run --rm \
   "$SILKBOMB_IMG" \
   update \
   --purls /pwd/compliance/purls.txt \
-  --sbom-out /pwd/compliance/sbom.json
-  
+  --sbom-out /pwd/compliance/sbom.json

scripts/compliance/upload-sbom.sh

@@ -9,5 +9,4 @@ docker run --rm \
   upload \
   --sbom-in /pwd/compliance/sbom.json \
   --repo "$KONDUKTO_REPO"  \
-  --branch "$KONDUKTO_BRANCH_PREFIX"
-  
+  --branch "$KONDUKTO_BRANCH_PREFIX"