diff --git a/.github/workflows/createSBOM.yml b/.github/workflows/createSBOM.yml index 8f27893..b0cd7a9 100644 --- a/.github/workflows/createSBOM.yml +++ b/.github/workflows/createSBOM.yml @@ -16,4 +16,5 @@ jobs: uses: anchore/sbom-action@v0 with: path: . + format: "cyclonedx-json" config: ".syft/config.yml" diff --git a/.syft/config.yml b/.syft/config.yml index 6dabd1d..242e562 100644 --- a/.syft/config.yml +++ b/.syft/config.yml @@ -9,4 +9,4 @@ # The dependencies in the lockfile are considered runtime dependencies. # The actual version is determined by the studio-client application. exclude: - - "studio-client/**" + - "./studio-client/**"