add SBOM to images

fkie-cad · Dec 17, 2024 · 5477e1d · 5477e1d
1 parent e668b17
commit 5477e1d
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -180,3 +180,9 @@ jobs:
           COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
           COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
           DIGEST: ${{ steps.build-and-push.outputs.digest }}
+
+      - uses: anchore/sbom-action@v0
+        with:
+          image: ghcr.io/fkie-cad/logprep:py${{ matrix.python-version }}-${{ github.head_ref }}@${DIGEST}
+        env:
+          DIGEST: ${{ steps.build-and-push.outputs.digest }}