workflows: debos: Readd BUILD_ID

upload-private-action takes care of generating an unique path, but we
have to retrive the artifacts too, and there's no download action yet,
so mirror this path in our workflow for now. Also, reinstate build id
for the SBOM metadata.

Signed-off-by: Loïc Minier <[email protected]>

Author: lool

.github/workflows/debos.yml

@@ -17,6 +17,14 @@ concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
   cancel-in-progress: true
 
+env:
+  # unique id per workflow run used by upload-private-artifact to store
+  # artifacts under the fileserver downloads
+  # XXX should probably have a download-private-artifact action instead
+  FILESERVER_PATH: ${{ github.repository }}/${{ github.run_id }}-${{ github.run_attempt }}
+  # image build id; used for SBOM generation; TODO: should be used in image metadata too
+  BUILD_ID: ${{ github.run_id }}-${{ github.run_attempt }}
+
 jobs:
   build-debos:
     name: Build and upload debos recipes
@@ -102,7 +110,7 @@ jobs:
           apt -y full-upgrade
 
       - name: Retrieve rootfs from fileserver
-        run: cp -av /fileserver-downloads/${BUILD_ID}/rootfs.tar.gz .
+        run: cp -av "/fileserver-downloads/${FILESERVER_PATH}/rootfs.tar.gz" .
 
       - name: Unpack rootfs
         run: mkdir -v rootfs && tar -C rootfs -xf rootfs.tar.gz