From fad3c5252e28f175b08ae9330b347c793edec1da Mon Sep 17 00:00:00 2001 From: forkless Date: Sat, 13 Jun 2026 20:50:33 +0200 Subject: [PATCH] switch SBOM to anchore/sbom-action (reliable, no compile) --- .github/workflows/release.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5c36814..6997cbc 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -68,13 +68,12 @@ jobs: tar -czf builds/notalterra-${GITHUB_REF_NAME}-linux-amd64.tar.gz notalterra cp target/x86_64-pc-windows-gnu/release/notalterra.exe NotAlterra.exe zip -q builds/notalterra-${GITHUB_REF_NAME}-windows-x64.zip NotAlterra.exe - - name: Install cyclonedx - continue-on-error: true - run: cargo install cargo-cyclonedx - name: Generate SBOM - run: | - cargo cyclonedx --all --output-dir builds 2>/dev/null || echo "SBOM generation failed (cargo-cyclonedx not available)" - mv builds/notalterra-*.cdx.json builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json 2>/dev/null || true + uses: anchore/sbom-action@v0.17.0 + with: + path: . + format: cyclonedx-json + output-file: builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json - name: Generate hashes id: hash run: |