switch SBOM to anchore/sbom-action (reliable, no compile)

This commit is contained in:
2026-06-13 21:12:43 +02:00
parent 45762ba760
commit fad3c5252e
+5 -6
View File
@@ -68,13 +68,12 @@ jobs:
tar -czf builds/notalterra-${GITHUB_REF_NAME}-linux-amd64.tar.gz notalterra
cp target/x86_64-pc-windows-gnu/release/notalterra.exe NotAlterra.exe
zip -q builds/notalterra-${GITHUB_REF_NAME}-windows-x64.zip NotAlterra.exe
- name: Install cyclonedx
continue-on-error: true
run: cargo install cargo-cyclonedx
- name: Generate SBOM
run: |
cargo cyclonedx --all --output-dir builds 2>/dev/null || echo "SBOM generation failed (cargo-cyclonedx not available)"
mv builds/notalterra-*.cdx.json builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json 2>/dev/null || true
uses: anchore/sbom-action@v0.17.0
with:
path: .
format: cyclonedx-json
output-file: builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json
- name: Generate hashes
id: hash
run: |