Generate bom

puzzle · Feb 5, 2024 · 52f321a · 52f321a
1 parent 32c168b
commit 52f321a
Showing 1 changed file with 6 additions and 2 deletions.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -28,10 +28,14 @@ jobs:
         with:
           args: --spec-version 1.4 -o sbom-npm.xml -t npm .
 
+      - name: 'Generate SBOM for Node.js dependencies'
+        uses: docker://ghcr.io/cyclonedx/cdxgen:v10.0.4
+        with:
+          args: cdxgen -r -o bom.json --spec-version 1.4 
+
       - name: "Show workspace"
         run: |
-          cat sbom-ruby.xml
-          cat sbom-npm.xml
+          cat bom.json
 
       - name: 'Merge frontend and backend SBOMs'
         uses: docker://cyclonedx/cyclonedx-cli:0.25.0