chore: possibly merged sboms
All checks were successful
Build, Package and Push Images / preprocess (push) Successful in 2s
Build, Package and Push Images / build (push) Successful in 25s
Build, Package and Push Images / sbom-scan (push) Successful in 37s
Build, Package and Push Images / container-build (push) Successful in 1m43s
Build, Package and Push Images / container-sbom-scan (push) Successful in 34s
Build, Package and Push Images / sonarqube (push) Successful in 3m20s

This commit is contained in:
Timothy Schenk 2023-11-14 23:01:42 +01:00
parent c197afc750
commit 8ee1c06c00

View file

@ -157,7 +157,7 @@ jobs:
password: ${{ secrets.REGISTRY_TOKEN }}
- name: Generate SBOM
run: |
docker sbom forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }} --format cyclonedx-json --output bom.json
docker sbom forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }} --format cyclonedx-json --output container-bom.json
- name: Upload SBOM
uses: https://github.com/DependencyTrack/gh-upload-sbom@v2.0.1
with:
@ -167,5 +167,5 @@ jobs:
autoCreate: true
# set projectversion to be the branch name
projectVersion: "${{ github.ref_name }}"
bomFilename: "${{ github.workspace }}/bom.json"
bomFilename: "${{ github.workspace }}/container-bom.json"