Skip to content
This repository was archived by the owner on Dec 16, 2025. It is now read-only.

🌱 generate sbom in json format with bom #131

Merged
kranurag7 merged 1 commit into from
Mar 13, 2024
Merged

🌱 generate sbom in json format with bom #131

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 2 additions & 3 deletions .github/workflows/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -83,12 +83,11 @@ jobs:
- name: Generate SBOM cspo
shell: bash
# To-Do: generate SBOM from source after https://github.com/kubernetes-sigs/bom/issues/202 is fixed
# To-Do: format SBOM output to json after cosign v2.0 is released with https://github.com/sigstore/cosign/pull/2479
run: |
bom generate -o sbom_ci_main_cspo_${{ steps.metacspo.outputs.version }}-spdx.json \
bom generate --format=json -o sbom_ci_main_cspo_${{ steps.metacspo.outputs.version }}-spdx.json \
--image=ghcr.io/sovereigncloudstack/cspo:${{ steps.metacspo.outputs.version }}

- name: Attach SBOM to Container Images cspo
- name: Attest SBOM to Container Images cspo
run: |
cosign attest --yes --type=spdxjson --predicate sbom_ci_main_cspo_${{ steps.metacspo.outputs.version }}-spdx.json ghcr.io/sovereigncloudstack/cspo@${{ steps.docker_build_release_cspo.outputs.digest }}

Expand Down