Code

Add an sbom workflow#6251

Code

Open

Amndeep7 wants to merge 18 commits intomastermitre/heimdall2:masterfrom sbom-workflowmitre/heimdall2:sbom-workflowCopy head branch name to clipboard

+81-38

Commits

Commits on Oct 4, 2024

• Update and rename anchore-syft.yml to sbom.yml

  Show description for cf6be24
  Amndeep7

  authored
  cf6be24

• Continue on error

  Amndeep7

  authored
  27aa579

• Please just do all the steps

  Amndeep7

  authored
  604d2b5

• GH CLI needs GITHUB_TOKEN envvar

  Amndeep7

  authored
  56a35a2

• Let's see if it actually runs all of them this time

  Amndeep7

  authored
  9e3c859

• Get rid of unnecessary gh sboms

  Amndeep7

  authored
  0e91daa

• Now experimenting with Anchore Syft

  Amndeep7

  authored
  a32b544

• Just doing installed deps with directory

  Amndeep7

  authored
  0609f6f

Commits on Oct 11, 2024

• Merge branch 'master' into sbom-workflow

  Amndeep7

  authored
  b13395a

Commits on Oct 14, 2024

• microsoft sbom tool

  Amndeep7

  authored
  890d5e1

• -m flag expects a directory not a file

  Amndeep7

  authored
  b4372b0

• Change path to the one actually generated by the tool and also look at permissions of generated file

  Amndeep7

  authored
  a10bab8

• apply workaround to cyclonedx cli bug

  Amndeep7

  authored
  8978079

• let's see if we can resolve this permissions issue

  Amndeep7

  authored
  3ea3056

• i think the cyclonedx cli image might be running a windows container? consequently permissions can get wonky between them so let's just give it everything.

  Amndeep7

  authored
  496a5ff

• check permissions in container

  Amndeep7

  authored
  a0a959f

• no tree

  Amndeep7

  authored
  03d7152

• use full path to ls instead of assuming any path is set to include the contents of /bin

  Amndeep7

  authored
  a3489db