bifrostsec/Submit SBOM to bifrost
Submits an SBOM file to the bifrost API for CVE tracking
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Activelast commit Jun 29, 2026
- License
- MIT
Pinned Snippet
uses: bifrostsec/submit-sbom-action@75022880ab1d80abd985c6b5b2c745e5d1d67e88 # v1.1.1tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| api-token | Bearer token for Bifrost API authentication | yes | — |
| service | Service name | yes | — |
| service-version | Service version | yes | — |
| image | DEPRECATED: Container image name (accepted, but ignored) | no | — |
| sbom-path | Path to the SBOM file to submit, or a newline-separated list of paths. | no | — |
| dependency-graph | Export and submit the GitHub dependency graph SBOM for a repository | no | false |
| retry-attempts | Number of retry attempts for failed requests | no | 3 |
| retry-delay | Delay in seconds between retry attempts | no | 2 |
| api-host | Custom API host URL | no | https://portal.bifrostsec.com |
Outputs
no outputs