Compare commits

...
6 Commits
Author SHA1 Message Date
Raphael Michel 9f697a296e Merge SBOMs to array 2026-07-30 21:54:45 +02:00
Raphael Michel ff6d2767b4 Remove matrix 2026-07-30 21:14:42 +02:00
Raphael Michel 9d997f6509 Use official cli 2026-07-30 21:14:42 +02:00
Raphael Michel f7a292debd Merge SBOMs 2026-07-30 21:14:42 +02:00
Raphael Michel 6881ed47a2 Build and upload SBOM 2026-07-30 21:14:41 +02:00
Raphael Michel 541e7412e1 Bump version to 2026.8.0.dev0 2026-07-30 20:39:47 +02:00
2 changed files with 52 additions and 1 deletions
+51
View File
@@ -0,0 +1,51 @@
name: SBOM
on:
push:
branches: [ master, sbom ]
tags: [ 'v.*' ]
permissions:
contents: read # to fetch code (actions/checkout)
env:
FORCE_COLOR: 1
jobs:
test:
runs-on: ubuntu-22.04
name: Submission
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.13"
- uses: actions/cache@v4
with:
path: ~/.cache/pip
key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}
restore-keys: |
${{ runner.os }}-pip-
- name: Install system dependencies
run: sudo apt update && sudo apt install -y gettext unzip jq
- name: Install node dependencies
run: sudo npm install --global @cyclonedx/cyclonedx-npm
- name: Install Python dependencies
run: pip3 install -U uv cyclonedx-bom prisma-sbom-submit
- name: Create empty environment
run: uv venv sbom-env
- name: Install package
run: uv pip install --python ./sbom-env/bin/python .
- name: Create Python SBOM
run: cyclonedx-py environment sbom-env > sbom-python.json
- name: Install node dependencies
run: npm ci
- name: Create JavaScript SBOM
run: cyclonedx-npm > sbom-npm.json
- name: Merge SBOMs
run: jq -s "[.[0], .[1]]" sbom-python.json sbom-npm.json > sbom.json
- name: Submit SBOM
run: prisma-sbom-submit --server https://prisma.pretix.com sbom.json
env:
PRISMA_UPLOAD_TOKEN: ${{ secrets.PRISMA_UPLOAD_TOKEN }}
+1 -1
View File
@@ -19,4 +19,4 @@
# You should have received a copy of the GNU Affero General Public License along with this program. If not, see
# <https://www.gnu.org/licenses/>.
#
__version__ = "2026.7.0"
__version__ = "2026.8.0.dev0"