chore: pull image before generating sbom
All checks were successful
Build, Package and Push Images / preprocess (push) Successful in 2s
Build, Package and Push Images / build (push) Successful in 26s
Build, Package and Push Images / sbom-scan (push) Successful in 36s
Build, Package and Push Images / container-build (push) Successful in 1m22s
Build, Package and Push Images / sonarqube (push) Successful in 1m26s
Build, Package and Push Images / container-sbom-scan (push) Successful in 35s

This commit is contained in:
Timothy Schenk 2023-11-14 23:19:12 +01:00
parent 04ef0d0b52
commit ff43691cdc

View file

@ -159,6 +159,7 @@ jobs:
run: | run: |
echo forge.rainote.dev/${{ github.repository }} echo forge.rainote.dev/${{ github.repository }}
echo forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }} echo forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }}
docker pull forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }}
docker sbom -D forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }} --format cyclonedx-json --output container-bom.json docker sbom -D forge.rainote.dev/${{ github.repository }}:${{ needs.preprocess.outputs.sanitized_branch_name }} --format cyclonedx-json --output container-bom.json
- name: Upload SBOM - name: Upload SBOM
uses: https://github.com/DependencyTrack/gh-upload-sbom@v2.0.1 uses: https://github.com/DependencyTrack/gh-upload-sbom@v2.0.1