From de044e5b5150349bf148eb7bb54963eb7a26d821 Mon Sep 17 00:00:00 2001 From: MD Ashique Date: Fri, 4 Aug 2023 19:29:56 +0530 Subject: [PATCH] sbom tool setup (#142) * Adding SBOM generation step (#135) Signed-off-by: MD Ashique * Java lib release (#137) * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique * Java lib release (#139) * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique * sbom tool setup (#141) * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique * merge from master (#12) * SBOM manifest generation (#138) * Adding SBOM generation step (#135) Signed-off-by: MD Ashique * Java lib release (#137) * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique * Java lib release (#139) * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique * Adding SBOM generation step Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique --------- Signed-off-by: MD Ashique --- .github/workflows/build.yml | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 3ec0d5ac..b15b824c 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -106,9 +106,13 @@ jobs: - name: Generate SBOM manifest if: startsWith(github.ref, 'refs/tags/v') run: | - curl -Lo sbom-tool https://github.com/microsoft/sbom-tool/releases/latest/download/sbom-tool-linux-x64 - chmod +x sbom-tool - ./sbom-tool generate -b ${{ env.MAVEN_OUTDIR }} -pn "Azure Functions Dapr Java Triggers and Bindings" -pv "${{ env.REL_VERSION }}" + sudo apt-get update + sudo apt-get install wget + wget https://github.com/microsoft/sbom-tool/releases/download/v1.2.0/sbom-tool-linux-x64 + chmod +x sbom-tool-linux-x64 + ls -l sbom-tool-linux-x64 + sudo mv sbom-tool-linux-x64 /usr/local/bin/sbom-tool + sbom-tool generate -b ${{ env.MAVEN_OUTDIR }} -pn "Azure Functions Dapr Java Triggers and Bindings" -pv "${{ env.REL_VERSION }}" working-directory: ${{ env.JAVA_LIB_WORKING_DIRECTORY }} - name: Upload .Net artifacts uses: actions/upload-artifact@master