Skip to content

Commit adf7cb3

Browse files
committed
feat: add Github Actions support for sbom generation
1 parent b01688f commit adf7cb3

File tree

1 file changed

+33
-0
lines changed

1 file changed

+33
-0
lines changed

.github/workflows/sbom.yml

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
name: SBOM
2+
3+
on:
4+
5+
pull_request:
6+
branches:
7+
- "*"
8+
push:
9+
branches:
10+
- "feature/integrate_sbom"
11+
12+
jobs:
13+
sbom:
14+
runs-on: ubuntu-latest
15+
16+
steps:
17+
- uses: actions/checkout@v4
18+
- name: Set up JDK 17
19+
uses: actions/setup-java@v4
20+
with:
21+
java-version: '17'
22+
distribution: 'temurin'
23+
- name: Create sbom
24+
run: ./gradlew cyclonedxBom
25+
- name: Convert to html
26+
run: xsltproc sbom/cyclonedx-xml-to-html.xslt build/reports/bom.xml > sbom.html
27+
- name: Export artifact
28+
if: success()
29+
uses: actions/upload-artifact@v4
30+
with:
31+
name: sbom
32+
path: ./sbom.html
33+

0 commit comments

Comments
 (0)