Use evidence

puzzle · Feb 5, 2024 · f58044e · f58044e
1 parent 6f74092
commit f58044e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -24,7 +24,7 @@ jobs:
       - name: 'Generate SBOM for Node.js dependencies'
         uses: docker://ghcr.io/cyclonedx/cdxgen:v10.0.4
         with:
-          args: --spec-version 1.4 -p -o bom-npm.json -t js .
+          args: --spec-version 1.4 -p -o bom-npm.json -t js --evidence .
 
       - name: 'Merge Ruby and Node.js SBOMs'
         uses: docker://cyclonedx/cyclonedx-cli:0.25.0