Skip to content

Commit a6b7b10

Browse files
authored
[FAST_BUILD] Publish SBOM using anchore/sbom-action (#2317)
1 parent 8515ad3 commit a6b7b10

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

.github/workflows/docker-tag-push.yml

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -77,6 +77,19 @@ jobs:
7777
shell: bash
7878
id: login
7979

80+
- name: Generate SBOM for the image 🧾
81+
uses: anchore/sbom-action@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # v0.20.6
82+
with:
83+
image: ${{ env.REGISTRY }}/${{ env.OWNER }}/${{ inputs.image }}
84+
output-file: /tmp/sbom.txt
85+
86+
- name: Upload SBOM 💾
87+
uses: actions/upload-artifact@v4
88+
with:
89+
name: ${{ inputs.image }}-sbom
90+
path: /tmp/sbom.txt
91+
retention-days: 40
92+
8093
- name: Push single platform images to Registry 📤
8194
if: env.PUSH_TO_REGISTRY == 'true'
8295
run: |

0 commit comments

Comments
 (0)