coderpatros/Generate Actions SBOM
Generates a CycloneDX SBOM of all GitHub Actions used in the current workflow, with refs resolved to commit SHAs.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| output-file | Path to write the SBOM JSON output file | no | actions-sbom.json |
| github-token | GitHub token used to resolve action refs to commit SHAs via the API | no | ${{ github.token }} |
| workflow-file | Explicit path to the workflow file to scan (relative to repo root). Auto-detected from GITHUB_WORKFLOW_REF when omitted. | no | "" |
Outputs
| name | description |
|---|---|
| sbom-path | Absolute path to the generated SBOM file |
| component-count | Number of action components included in the SBOM |