We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 92a1324 commit 1ceb859Copy full SHA for 1ceb859
1 file changed
.github/workflows/main.yml
@@ -13,4 +13,19 @@ jobs:
13
input: ./requirements.txt
14
output: ./bom.json
15
format: json
16
+
17
+ - name: Upload SBOM artifact
18
+ uses: action/upload-artifact@v2
19
+ with:
20
+ name: SBOM
21
+ path: ./bom.json
22
23
+ - name: Commit SBOM to repo
24
+ run: |
25
+ git config --local user.email "action@github.com"
26
+ git config --local user.name "GitHub Action"
27
+ git add bom.json
28
+ git commit -m "Adding SBOM"
29
+ git push
30
31
0 commit comments