CGM_Public/pretix_cgo
3
0
Fork 0
forked from CGM_Public/pretix_original
Code Pull Requests Actions Activity

Use newer sbom-submit

Browse Source
This commit is contained in:
Raphael Michel
2026-08-01 12:26:30 +02:00
parent 9f697a296e
commit f26f9821ad
1 changed files with 5 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/sbom.yml
+5 -17
View File
@@ -28,24 +28,12 @@ jobs:
restore-keys: |
${{ runner.os }}-pip-
- name: Install system dependencies
run: sudo apt update && sudo apt install -y gettext unzip jq
- name: Install node dependencies
run: sudo npm install --global @cyclonedx/cyclonedx-npm
run: sudo apt update && sudo apt install -y gettext unzip
- name: Install Python dependencies
run: pip3 install -U uv cyclonedx-bom prisma-sbom-submit
- name: Create empty environment
run: uv venv sbom-env
- name: Install package
run: uv pip install --python ./sbom-env/bin/python .
- name: Create Python SBOM
run: cyclonedx-py environment sbom-env > sbom-python.json
- name: Install node dependencies
run: npm ci
- name: Create JavaScript SBOM
run: cyclonedx-npm > sbom-npm.json
- name: Merge SBOMs
run: jq -s "[.[0], .[1]]" sbom-python.json sbom-npm.json > sbom.json
run: pip3 install -U "prisma-sbom-submit[python]"
- name: Submit SBOM
run: prisma-sbom-submit --server https://prisma.pretix.com sbom.json
run: prisma-sbom-submit collect . sbom.json
- name: Submit SBOM
run: prisma-sbom-submit upload --server https://prisma.pretix.com sbom.json
env:
PRISMA_UPLOAD_TOKEN: ${{ secrets.PRISMA_UPLOAD_TOKEN }}