Generate release SBOM with Syft
This commit is contained in:
@@ -35,7 +35,10 @@ jobs:
|
|||||||
--tag "$image" .
|
--tag "$image" .
|
||||||
docker push "$image"
|
docker push "$image"
|
||||||
docker image inspect "$image" --format '{{index .RepoDigests 0}}' > image-digest.txt
|
docker image inspect "$image" --format '{{index .RepoDigests 0}}' > image-digest.txt
|
||||||
docker sbom "$image" --format spdx-json > sbom.spdx.json
|
docker run --rm \
|
||||||
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
||||||
|
anchore/syft:v1.33.0 \
|
||||||
|
"docker:$image" -o spdx-json > sbom.spdx.json
|
||||||
cat > RELEASE_NOTES.md <<EOF
|
cat > RELEASE_NOTES.md <<EOF
|
||||||
# VacatureRadar ${version}
|
# VacatureRadar ${version}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user