add sbom gh action

quarkiverse · Aug 14, 2023 · 9af2309 · 9af2309
1 parent 237f2cd
commit 9af2309
Showing 1 changed file with 25 additions and 0 deletions.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -0,0 +1,25 @@
+name: SBOM Generator
+
+on:
+  push:
+    branches: [ "main" ]
+
+  workflow_dispatch:
+
+permissions: read-all
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v3
+
+      - uses: advanced-security/sbom-generator-action@v0.0.1
+        id: sbom
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+      - uses: actions/upload-artifact@v3.1.0
+        with:
+          path: ${{steps.sbom.outputs.fileName }}
+          name: "SBOM"