CGM_Public/pretix_original
2
0
Fork 1
mirror of https://github.com/pretix/pretix.git synced 2026-08-06 10:07:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Use official cli

Browse Source
This commit is contained in:
Raphael Michel
2026-07-30 21:14:42 +02:00
parent f7a292debd
commit 9d997f6509
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/sbom.yml
+6 -2
View File
@@ -34,8 +34,10 @@ jobs:
run: sudo apt update && sudo apt install -y gettext unzip
- name: Install node dependencies
run: sudo npm install --global @cyclonedx/cyclonedx-npm
- name: Install CycloneDX CLI
run: wget https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.32.0/cyclonedx-linux-x64 && chmod +x cyclonedx-linux-x64
- name: Install Python dependencies
run: pip3 install -U uv cyclonedx-bom prisma-sbom-submit sbommerge
run: pip3 install -U uv cyclonedx-bom prisma-sbom-submit
- name: Create empty environment
run: uv venv sbom-env
- name: Install package
@@ -47,6 +49,8 @@ jobs:
- name: Create JavaScript SBOM
run: cyclonedx-npm > sbom-npm.json
- name: Merge SBOMs
run: sbommerge sbom-python.json sbom-npm.json --format json -o sbom.json
run: ./cyclonedx-linux-x64 merge --input-files sbom-python.json sbom-npm.json --output-format json --output-file sbom.json
- name: Submit SBOM
run: prisma-sbom-submit --server https://prisma.pretix.com sbom.json
env:
PRISMA_UPLOAD_TOKEN: ${{ secrets.PRISMA_UPLOAD_TOKEN }}