Skip to content

Commit d133d39

Browse files
committed
ci: need to generate cargo lock file before running the sbom
1 parent c75dc40 commit d133d39

1 file changed

Lines changed: 4 additions & 0 deletions

File tree

‎.github/workflows/sbom.yml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,13 +27,17 @@ jobs:
2727
with:
2828
python-version: "3.12"
2929

30+
- name: Generate Cargo.lock
31+
run: cargo generate-lockfile
32+
3033
- name: Install compliance-assistant
3134
run: pip install compliance-assistant
3235

3336
- name: Generate SBOM with syft
3437
run: compliance-assistant sbom generate -g syft -d . -o ${{ runner.temp }}/sbom-raw.json
3538
env:
3639
SYFT_EXCLUDE: "./target,./.venv,./.git,./.github"
40+
SYFT_SOURCE_NAME: tp-lib
3741

3842
- name: Store raw SBOM as artifact
3943
uses: actions/upload-artifact@v4

0 commit comments

Comments
 (0)