Compare commits

...
12 Commits
Author SHA1 Message Date
Raphael Michel 019551fc19 Add test 2026-08-01 21:54:17 +02:00
Raphael Michel 2ee49dfa14 Add npm location 2026-08-01 20:13:53 +02:00
Raphael Michel 65c774c1f6 Explicitly setup node 2026-08-01 12:46:00 +02:00
Raphael Michel a9de7a5b12 Remove debug 2026-08-01 12:41:08 +02:00
Raphael Michel 50c61b038c debug 2026-08-01 12:33:51 +02:00
Raphael Michel f26f9821ad Use newer sbom-submit 2026-08-01 12:26:30 +02:00
Raphael Michel 9f697a296e Merge SBOMs to array 2026-07-30 21:54:45 +02:00
Raphael Michel ff6d2767b4 Remove matrix 2026-07-30 21:14:42 +02:00
Raphael Michel 9d997f6509 Use official cli 2026-07-30 21:14:42 +02:00
Raphael Michel f7a292debd Merge SBOMs 2026-07-30 21:14:42 +02:00
Raphael Michel 6881ed47a2 Build and upload SBOM 2026-07-30 21:14:41 +02:00
Raphael Michel 541e7412e1 Bump version to 2026.8.0.dev0 2026-07-30 20:39:47 +02:00
2 changed files with 46 additions and 1 deletions
+45
View File
@@ -0,0 +1,45 @@
name: SBOM
on:
push:
branches: [ master, sbom ]
tags: [ 'v.*' ]
permissions:
contents: read # to fetch code (actions/checkout)
env:
FORCE_COLOR: 1
jobs:
test:
runs-on: ubuntu-22.04
name: Submission
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.13"
- name: Use Node.js
uses: actions/setup-node@v7
with:
node-version: '24.x'
- uses: actions/cache@v4
with:
path: ~/.cache/pip
key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}
restore-keys: |
${{ runner.os }}-pip-
- name: Install system dependencies
run: sudo apt update && sudo apt install -y gettext unzip
- name: Install Python dependencies
run: pip3 install -U "prisma-sbom-submit[python]"
- name: Test
run: /opt/hostedtoolcache/node/24.18.0/x64/bin/npm install --global @cyclonedx/cyclonedx-npm
- name: Create SBOM
run: NPM=$(which npm) prisma-sbom-submit collect . sbom.json
- name: Submit SBOM
run: prisma-sbom-submit upload --server https://prisma.pretix.com sbom.json
env:
PRISMA_UPLOAD_TOKEN: ${{ secrets.PRISMA_UPLOAD_TOKEN }}
+1 -1
View File
@@ -19,4 +19,4 @@
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
# <https://www.gnu.org/licenses/>.
#
__version__ = "2026.7.0"
__version__ = "2026.8.0.dev0"