Skip to content

Upload SBOM to EdgeBit #4

Upload SBOM to EdgeBit

Upload SBOM to EdgeBit #4

Workflow file for this run

name: Upload SBOM to EdgeBit
on:
workflow_run:
workflows: ["Generate an SBOM from source code"]
types:
- completed
jobs:
upload:
runs-on: ubuntu-latest
if: github.event.workflow_run.conclusion == 'success'
steps:
- name: Download metadata
id: metadata
uses: dawidd6/[email protected]
with:
run_id: ${{ github.event.workflow_run.id }}
name: metadata.json
- name: Download SBOM
id: sbom
uses: dawidd6/[email protected]
with:
run_id: ${{ github.event.workflow_run.id }}
name: sbom.spdx.json
- name: Upload SBOM to EdgeBit
uses: edgebitio/edgebit-build@v1
with:
edgebit-url: https://alex.edgebit.io
token: ${{ secrets.EDGEBIT_TOKEN }}
component: marker
sbom-file: ./sbom.spdx.json
args-file: ./metadata.json