Skip to content

Commit 0dd1f55

Browse files
🔄 synced local '.github/workflows/push.yml' with remote '.github/workflows/push.yml'
1 parent e6b7189 commit 0dd1f55

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

‎.github/workflows/push.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -64,16 +64,16 @@ jobs:
6464

6565
- name: Downloading Syft
6666
id: syft
67-
uses: anchore/sbom-action/download-syft@9fece9e20048ca9590af301449208b2b8861333b
67+
uses: anchore/sbom-action/download-syft@ab5d7b5f48981941c4c5d6bf33aeb98fe3bae38c
6868

6969
- name: Generate SBOM file
70-
uses: anchore/sbom-action@9fece9e20048ca9590af301449208b2b8861333b
70+
uses: anchore/sbom-action@ab5d7b5f48981941c4c5d6bf33aeb98fe3bae38c
7171
with:
7272
artifact-name: sbom.spdx
7373
format: spdx
7474
dependency-snapshot: true
7575

7676
- name: Publish SBOM File
77-
uses: anchore/sbom-action/publish-sbom@9fece9e20048ca9590af301449208b2b8861333b
77+
uses: anchore/sbom-action/publish-sbom@ab5d7b5f48981941c4c5d6bf33aeb98fe3bae38c
7878
with:
7979
sbom-artifact-match: ".*\\.spdx$"

0 commit comments

Comments
 (0)