We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b01688f commit adf7cb3Copy full SHA for adf7cb3
.github/workflows/sbom.yml
@@ -0,0 +1,33 @@
1
+name: SBOM
2
+
3
+on:
4
5
+ pull_request:
6
+ branches:
7
+ - "*"
8
+ push:
9
10
+ - "feature/integrate_sbom"
11
12
+jobs:
13
+ sbom:
14
+ runs-on: ubuntu-latest
15
16
+ steps:
17
+ - uses: actions/checkout@v4
18
+ - name: Set up JDK 17
19
+ uses: actions/setup-java@v4
20
+ with:
21
+ java-version: '17'
22
+ distribution: 'temurin'
23
+ - name: Create sbom
24
+ run: ./gradlew cyclonedxBom
25
+ - name: Convert to html
26
+ run: xsltproc sbom/cyclonedx-xml-to-html.xslt build/reports/bom.xml > sbom.html
27
+ - name: Export artifact
28
+ if: success()
29
+ uses: actions/upload-artifact@v4
30
31
+ name: sbom
32
+ path: ./sbom.html
33
0 commit comments