diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index e4180a4..9ce9962 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -35,7 +35,10 @@ jobs: --tag "$image" . docker push "$image" docker image inspect "$image" --format '{{index .RepoDigests 0}}' > image-digest.txt - docker sbom "$image" --format spdx-json > sbom.spdx.json + docker run --rm \ + -v /var/run/docker.sock:/var/run/docker.sock \ + anchore/syft:v1.33.0 \ + "docker:$image" -o spdx-json > sbom.spdx.json cat > RELEASE_NOTES.md <