fabiocicerchia/sbom-diff
Diff two SBOMs and post the result as a PR comment
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| old-sbom | Path to the previous SBOM (CycloneDX or SPDX JSON) | yes | — |
| new-sbom | Path to the current SBOM | yes | — |
| fail-on | Exit non-zero on: any change / major bumps / license changes | no | "" |
| github-token | Token used to post/update the PR comment | no | ${{ github.token }} |
Outputs
| name | description |
|---|---|
| summary | One-line summary of the diff |