mirror of
https://github.com/forkless/NotAlterra.git
synced 2026-08-20 01:53:35 +02:00
switch SBOM to anchore/sbom-action (reliable, no compile)
This commit is contained in:
@@ -68,13 +68,12 @@ jobs:
|
||||
tar -czf builds/notalterra-${GITHUB_REF_NAME}-linux-amd64.tar.gz notalterra
|
||||
cp target/x86_64-pc-windows-gnu/release/notalterra.exe NotAlterra.exe
|
||||
zip -q builds/notalterra-${GITHUB_REF_NAME}-windows-x64.zip NotAlterra.exe
|
||||
- name: Install cyclonedx
|
||||
continue-on-error: true
|
||||
run: cargo install cargo-cyclonedx
|
||||
- name: Generate SBOM
|
||||
run: |
|
||||
cargo cyclonedx --all --output-dir builds 2>/dev/null || echo "SBOM generation failed (cargo-cyclonedx not available)"
|
||||
mv builds/notalterra-*.cdx.json builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json 2>/dev/null || true
|
||||
uses: anchore/sbom-action@v0.17.0
|
||||
with:
|
||||
path: .
|
||||
format: cyclonedx-json
|
||||
output-file: builds/notalterra-${GITHUB_REF_NAME}-sbom.cdx.json
|
||||
- name: Generate hashes
|
||||
id: hash
|
||||
run: |
|
||||
|
||||
Reference in New Issue
Block a user