chore: add sbom workflow (#573)

close: https://project.feishu.cn/taosdata_td/feature/detail/6796130131

Author: qevolg

.github/workflows/compatibility.yml

@@ -31,10 +31,9 @@ jobs:
 
       - name: Start TDengine
         run: |
-          sudo mkdir -p /mnt/taos/data /mnt/taos/log
-          sudo chown -R "$USER":"$(id -gn)" /mnt/taos
+          mkdir -p /tmp/taos/log /tmp/taos/data
           taosd &
-          TAOS_ADAPTER_LOG_PATH=/mnt/taos/log taosadapter &
+          TAOS_ADAPTER_LOG_PATH=/tmp/taos/log taosadapter &
 
       - name: Start Nginx
         run: |

.github/workflows/coverage.yml

@@ -120,12 +120,6 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-tdengine
     steps:
-      - name: Maximize build space
-        uses: easimon/maximize-build-space@master
-        with:
-          root-reserve-mb: 10240
-          temp-reserve-mb: 20480
-
       - name: Get cache server by push
         if: github.event_name == 'push'
         id: get-cache-server-push
@@ -194,11 +188,9 @@ jobs:
 
       - name: Start TDengine
         run: |
-          sudo mkdir -p /mnt/taos/data /mnt/taos/log
-          sudo chown -R "$USER":"$(id -gn)" /mnt/taos
+          mkdir -p /tmp/taos/log /tmp/taos/data
           taosd &
-          TAOS_ADAPTER_LOG_PATH=/mnt/taos/log taosadapter &
-          sleep 1
+          TAOS_ADAPTER_LOG_PATH=/tmp/taos/log taosadapter &
 
       - name: Start Nginx
         run: |

.github/workflows/enterprise.yml

@@ -8,12 +8,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - name: Maximize build space
-        uses: easimon/maximize-build-space@master
-        with:
-          root-reserve-mb: 10240
-          temp-reserve-mb: 20480
-
       - name: Checkout
         uses: actions/checkout@v4
 
@@ -37,10 +31,9 @@ jobs:
 
       - name: Start TDengine
         run: |
-          sudo mkdir -p /mnt/taos/data /mnt/taos/log
-          sudo chown -R "$USER":"$(id -gn)" /mnt/taos
+          mkdir -p /tmp/taos/log /tmp/taos/data
           taosd &
-          TAOS_ADAPTER_LOG_PATH=/mnt/taos/log taosadapter &
+          TAOS_ADAPTER_LOG_PATH=/tmp/taos/log taosadapter &
 
       - name: Start Nginx
         run: |
@@ -104,12 +97,6 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - name: Maximize build space
-        uses: easimon/maximize-build-space@master
-        with:
-          root-reserve-mb: 10240
-          temp-reserve-mb: 20480
-
       - name: Checkout
         uses: actions/checkout@v4
 
@@ -133,10 +120,9 @@ jobs:
 
       - name: Start TDengine
         run: |
-          sudo mkdir -p /mnt/taos/data /mnt/taos/log
-          sudo chown -R "$USER":"$(id -gn)" /mnt/taos
+          mkdir -p /tmp/taos/log /tmp/taos/data
           taosd &
-          TAOS_ADAPTER_LOG_PATH=/mnt/taos/log taosadapter &
+          TAOS_ADAPTER_LOG_PATH=/tmp/taos/log taosadapter &
 
       - name: Start Nginx
         run: |

.github/workflows/sbom.yml

@@ -0,0 +1,33 @@
+name: SBOM
+
+on:
+  pull_request:
+    branches: ["main", "3.0"]
+  release:
+    types: [published]
+
+jobs:
+  sbom:
+    name: Generate and Scan SBOM
+    runs-on: ubuntu-latest
+    permissions:
+      actions: read
+      contents: write
+    env:
+      SBOM_FILENAME: "${{ github.event.repository.name }}-sbom.cdx.json"
+    steps:
+      - uses: actions/checkout@v6
+
+      - name: Create SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          format: cyclonedx-json
+          output-file: "${{ env.SBOM_FILENAME }}"
+          artifact-name: "${{ env.SBOM_FILENAME }}"
+
+      - name: Scan SBOM
+        uses: anchore/scan-action@v7
+        with:
+          sbom: "${{ env.SBOM_FILENAME }}"
+          cache-db: true
+          output-format: "table"

.github/workflows/taos.cfg

@@ -1,5 +1,5 @@
 fqdn            localhost
 firstEp         localhost:6030
 supportVnodes   256
-dataDir         /mnt/taos/data
-logDir          /mnt/taos/log
+dataDir         /tmp/taos/data
+logDir          /tmp/taos/log

Cargo.lock

@@ -15,7 +15,7 @@ exclude = ["tests/", "examples", "docker-compose.yml"]
 [dependencies]
 anyhow = "1"
 async-trait = "0.1"
-bytes = "1.2"
+bytes = "1.11.1"
 cfg-if = "1.0.0"
 derive_more = { version = "1", features = [
     "deref",

taos-optin/Cargo.toml

@@ -12,7 +12,7 @@ description.workspace = true
 
 [dependencies]
 anyhow = "1"
-bytes = { version = "1.1", features = ["serde"] }
+bytes = { version = "1.11.1", features = ["serde"] }
 chrono = { version = "0.4", features = ["serde"] }
 chrono-tz = "0.10.4"
 derive_more = { version = "1", features = [

taos-query/Cargo.toml

@@ -11,7 +11,7 @@ crate-type = ["cdylib", "staticlib"]
 
 [dependencies]
 anyhow = "1"
-bytes = "1.1.0"
+bytes = "1.11.1"
 byteorder = "1.5.0"
 cargo_metadata = "0.18.1"
 ctor = "0.2.9"

taos-ws-sys/Cargo.toml

@@ -12,7 +12,7 @@ repository.workspace = true
 [dependencies]
 anyhow = "1"
 async-trait = { version = "0.1.80" }
-bytes = "1.1.0"
+bytes = "1.11.1"
 byteorder = "1.5.0"
 cfg-if = "1"
 chrono-tz = "0.10.4"