We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2ce09a3 commit 1b7fdbaCopy full SHA for 1b7fdba
‎.github/workflows/push.yml
@@ -64,16 +64,16 @@ jobs:
64
65
- name: Downloading Syft
66
id: syft
67
- uses: anchore/sbom-action/download-syft@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
+ uses: anchore/sbom-action/download-syft@ab9d16d4b419c9d1a02df5213fa0ebe965ca5a57
68
69
- name: Generate SBOM file
70
- uses: anchore/sbom-action@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
+ uses: anchore/sbom-action@ab9d16d4b419c9d1a02df5213fa0ebe965ca5a57
71
with:
72
artifact-name: sbom.spdx
73
format: spdx
74
dependency-snapshot: true
75
76
- name: Publish SBOM File
77
- uses: anchore/sbom-action/publish-sbom@d94f46e13c6c62f59525ac9a1e147a99dc0b9bf5
+ uses: anchore/sbom-action/publish-sbom@ab9d16d4b419c9d1a02df5213fa0ebe965ca5a57
78
79
sbom-artifact-match: ".*\\.spdx$"
0 commit comments