File tree Expand file tree Collapse file tree 2 files changed +4
-15
lines changed
Expand file tree Collapse file tree 2 files changed +4
-15
lines changed Original file line number Diff line number Diff line change 3030# - //showcases/cli:cli
3131# - //showcases/orchestration_persistency:orch_per_example
3232name : Generate SBOM
33-
3433on :
3534 workflow_dispatch :
36-
3735jobs :
3836 sbom :
3937 runs-on : ubuntu-latest
4038 permissions :
41- contents : write # required for GitHub Dependency Submission API
42-
39+ contents : write # required for GitHub Dependency Submission API
4340 steps :
4441 - name : Clean disk space
4542 uses : eclipse-score/more-disk-space@v1
46-
4743 - name : Checkout repository
4844 uses : actions/checkout@v4.2.2
49-
5045 - name : Setup Bazel
5146 uses : bazel-contrib/setup-bazel@0.18.0
5247 with :
5348 bazelisk-cache : true
5449 disk-cache : ${{ github.workflow }}
5550 repository-cache : true
5651 cache-save : true
57-
5852 - name : Install uv
5953 uses : astral-sh/setup-uv@v7.6.0
60-
6154 - name : Install Java for Rust crate metadata
6255 run : |
6356 sudo apt-get update
6457 sudo apt-get install -y --no-install-recommends openjdk-11-jre-headless
65-
6658 - name : Build SBOM
6759 run : bazel build --lockfile_mode=error //:reference_integration_sbom
68-
6960 - name : Upload SBOM artifacts
7061 uses : actions/upload-artifact@v4
7162 with :
7465 bazel-bin/reference_integration_sbom.spdx.json
7566 bazel-bin/reference_integration_sbom.cdx.json
7667 retention-days : 90
77-
7868 - name : Convert SPDX to GitHub Dependency snapshot
7969 run : |
8070 bazel run @score_sbom//scripts:spdx_to_github_snapshot_bin -- \
8474 --ref "${{ github.ref }}" \
8575 --job-correlator "generate-sbom" \
8676 --job-id "${{ github.run_id }}"
87-
8877 - name : Submit to GitHub Dependency Submission API
8978 uses : actions/github-script@v7
9079 with :
Original file line number Diff line number Diff line change @@ -74,11 +74,11 @@ exports_files([
7474# SBOM for core showcase targets
7575sbom (
7676 name = "reference_integration_sbom" ,
77+ auto_crates_cache = True ,
78+ component_name = "score_reference_integration" ,
79+ module_lockfiles = [":MODULE.bazel.lock" ],
7780 targets = [
7881 "//showcases/cli:cli" ,
7982 "//showcases/orchestration_persistency:orch_per_example" ,
8083 ],
81- component_name = "score_reference_integration" ,
82- module_lockfiles = [":MODULE.bazel.lock" ],
83- auto_crates_cache = True ,
8484)
You can’t perform that action at this time.
0 commit comments