File tree Expand file tree Collapse file tree 1 file changed +16
-1
lines changed Expand file tree Collapse file tree 1 file changed +16
-1
lines changed Original file line number Diff line number Diff line change @@ -64,11 +64,25 @@ jobs:
64
64
run : |
65
65
make
66
66
67
+ - name : Generate SBOM for binary
68
+ uses : anchore/sbom-action@v0
69
+ env :
70
+ SBOM_NAME : sbom.json
71
+ with :
72
+ path : ./bin/
73
+ format : spdx-json
74
+ artifact-name : ${{ env.SBOM_NAME }}
75
+ output-file : ./bin/${{ env.SBOM_NAME }}1
76
+
77
+ - name : Set up Docker Buildx
78
+ uses : docker/setup-buildx-action@v3
79
+
67
80
- name : Push Docker image
68
- uses : docker/build-push-action@v5
81
+ uses : docker/build-push-action@v6
69
82
with :
70
83
context : .
71
84
push : true
85
+ sbom : true
72
86
tags : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG_NAME }}
73
87
74
88
- name : Upload image tarballs to GCS
83
97
token : ${{ secrets.GITHUB_TOKEN }}
84
98
files : |
85
99
bin/firewall-controller*
100
+ bin/sbom.json
86
101
if : ${{ github.event_name == 'release' }}
87
102
88
103
test :
You can’t perform that action at this time.
0 commit comments