Merge pull request #1447 from shirou/feature/add_sbom_github_actions

Add github SBOM Generator
shirou · Apr 6, 2023 · 21a646b · 21a646b
2 parents bcf3fe9 + 90f9165
commit 21a646b
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/.github/workflows/sbom_generator.yml b/.github/workflows/sbom_generator.yml
@@ -0,0 +1,25 @@
+name: SBOM Generator
+
+on:
+  push:
+    branches: [ "main" ]
+
+  workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: advanced-security/sbom-generator-action@v0.0.1
+        id: sbom
+        env: 
+          GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/upload-artifact@v3.1.0
+        with: 
+          path: ${{steps.sbom.outputs.fileName }}
+          name: "SBOM"