From f26f9821ad10d28a0563e9e9cbbac9e010b3cbd0 Mon Sep 17 00:00:00 2001
From: Raphael Michel <michel@rami.io>
Date: Sat, 1 Aug 2026 12:26:30 +0200
Subject: [PATCH] Use newer sbom-submit

---
 .github/workflows/sbom.yml | 22 +++++-----------------
 1 file changed, 5 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
index b1ff0540c8..882d1981e0 100644
--- a/.github/workflows/sbom.yml
+++ b/.github/workflows/sbom.yml
@@ -28,24 +28,12 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-pip-
       - name: Install system dependencies
-        run: sudo apt update && sudo apt install -y gettext unzip jq
-      - name: Install node dependencies
-        run: sudo npm install --global @cyclonedx/cyclonedx-npm
+        run: sudo apt update && sudo apt install -y gettext unzip
       - name: Install Python dependencies
-        run: pip3 install -U uv cyclonedx-bom prisma-sbom-submit
-      - name: Create empty environment
-        run: uv venv sbom-env
-      - name: Install package
-        run: uv pip install --python ./sbom-env/bin/python  .
-      - name: Create Python SBOM
-        run: cyclonedx-py environment sbom-env > sbom-python.json
-      - name: Install node dependencies
-        run: npm ci
-      - name: Create JavaScript SBOM
-        run: cyclonedx-npm > sbom-npm.json
-      - name: Merge SBOMs
-        run: jq -s "[.[0], .[1]]" sbom-python.json sbom-npm.json > sbom.json
+        run: pip3 install -U "prisma-sbom-submit[python]"
       - name: Submit SBOM
-        run: prisma-sbom-submit --server https://prisma.pretix.com sbom.json
+        run: prisma-sbom-submit collect . sbom.json
+      - name: Submit SBOM
+        run: prisma-sbom-submit upload --server https://prisma.pretix.com sbom.json
         env:
           PRISMA_UPLOAD_TOKEN: ${{ secrets.PRISMA_UPLOAD_TOKEN }}