chore: Generate SSDLC report and SBOM on release #1365
Conversation
| echo "${publish_output}" | ||
|
|
||
| # Extract and store the published version from PublicTypeArn | ||
| published_version=$(echo "${publish_output}" | jq -r '.PublicTypeArn' | awk -F'/' '{print $NF}') |
There was a problem hiding this comment.
see docs to understand why this is done
|
|
||
| # Extract and store the published version from PublicTypeArn | ||
| published_version=$(echo "${publish_output}" | jq -r '.PublicTypeArn' | awk -F'/' '{print $NF}') | ||
| echo "$published_version" >published_version.txt |
There was a problem hiding this comment.
We need to store it into a file so that it can be accessed in the next steps of Github action above to store it as a GITHUB_OUTPUT to be used in the next job
EspenAlbert
left a comment
EspenAlbert
left a comment
There was a problem hiding this comment.
Nice reuse from TF. Wish it was a way to re-use the *.sh too, but I see some paths are different, therefore, maybe not worth it?
@EspenAlbert I don't think is worth it, also, it should be possible to generate purls, sbom and ssdlc report locally in the repo, so I think we should have the scripts here in case we need to manually generate those outside the CI |
Proposed changes
Generates SSDLC report and sbom for released resources.
Tested the changes, see the action run and the generated commit
Link to any related issue(s): CLOUDP-324019
Type of change:
expected)
Manual QA performed:
Required Checklist:
make fmtand formatted my codeworks in Atlas
Further comments