ignore image sbom for now
This commit is contained in:
27
.github/workflows/build.yaml
vendored
27
.github/workflows/build.yaml
vendored
@@ -336,13 +336,6 @@ jobs:
|
|||||||
':!LETRO_VERSION' ':!FORK_DIVERGENCE.md' ':!UPSTREAM_VERSION' \
|
':!LETRO_VERSION' ':!FORK_DIVERGENCE.md' ':!UPSTREAM_VERSION' \
|
||||||
> fork-changes.diff
|
> fork-changes.diff
|
||||||
|
|
||||||
- name: Login to GitHub Container Registry
|
|
||||||
uses: docker/login-action@v4.1.0
|
|
||||||
with:
|
|
||||||
registry: ghcr.io
|
|
||||||
username: ${{ github.repository_owner }}
|
|
||||||
password: ${{ secrets.GITHUB_TOKEN }}
|
|
||||||
|
|
||||||
- name: Install Trivy
|
- name: Install Trivy
|
||||||
run: |
|
run: |
|
||||||
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
|
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin
|
||||||
@@ -351,24 +344,9 @@ jobs:
|
|||||||
run: |
|
run: |
|
||||||
trivy fs \
|
trivy fs \
|
||||||
--format cyclonedx \
|
--format cyclonedx \
|
||||||
--output sbom-repo.json \
|
--output sbom.json \
|
||||||
.
|
.
|
||||||
|
|
||||||
- name: Pull the Docker image
|
|
||||||
env:
|
|
||||||
IMAGE_DIGEST: ${{ fromJSON(needs.build-image.outputs.metadata).regular.digest }}
|
|
||||||
run: |
|
|
||||||
docker pull "${{ env.IMAGE }}@${IMAGE_DIGEST}"
|
|
||||||
|
|
||||||
- name: Generate image SBOM with Trivy
|
|
||||||
env:
|
|
||||||
IMAGE_DIGEST: ${{ fromJSON(needs.build-image.outputs.metadata).regular.digest }}
|
|
||||||
run: |
|
|
||||||
trivy image \
|
|
||||||
--format cyclonedx \
|
|
||||||
--output sbom-image.json \
|
|
||||||
"${{ env.IMAGE }}@${IMAGE_DIGEST}"
|
|
||||||
|
|
||||||
- name: Prepare a release
|
- name: Prepare a release
|
||||||
uses: softprops/action-gh-release@v2.6.1
|
uses: softprops/action-gh-release@v2.6.1
|
||||||
with:
|
with:
|
||||||
@@ -404,8 +382,7 @@ jobs:
|
|||||||
files: |
|
files: |
|
||||||
fork-changes.diff
|
fork-changes.diff
|
||||||
FORK_DIVERGENCE.md
|
FORK_DIVERGENCE.md
|
||||||
sbom-repo.json
|
sbom.json
|
||||||
sbom-image.json
|
|
||||||
|
|
||||||
unstable:
|
unstable:
|
||||||
name: Update the unstable release
|
name: Update the unstable release
|
||||||
|
|||||||
Reference in New Issue
Block a user