equisoft-actions/Generate a CycloneDX SBOM and uploads it to Github
Utilizes Trivy to generate a SBOM. This SBOM will then be archived and uploaded to Github.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| aws-access-key-id | DEPRECATED. An AWS access key ID that has read permissions to the registry. | no | "" |
| aws-secret-access-key | DEPRECATED. An AWS secret access key that has read permissions to the registry. | no | "" |
| aws-region | AWS region for the registry. | no | "" |
| image-name | The Docker image to run the checks on. | yes | — |
| report-retention-days | Duration in days to preserve reports. | yes | 5 |
| role-to-assume | Role to assume that has read access to the registry. | no | — |
| role-session-name | Session name to use when assuming the role. | no | — |
| working-directory | Relative path under $GITHUB_WORKSPACE where the root project is located. | no | . |
Outputs
no outputs