opencontextinc/Generate SBOM YAML

Generate SBOM (SPDX) and OpenContext artifact YAML

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stalelast commit Oct 19, 2023
License
Apache 2.0

Pinned Snippet

workflow.ymlSHA-pinned
uses: opencontextinc/generate-sbom-yaml@48657649e89aa5d7b5e768c5b2a2644df273757d # v1.0.1

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
upload_yamlUpload OpenContext SBOM artifact YAML to release?yestrue
namedescription
sbom_pathThe path of the SBOM generated
sbom_urlThe release URL where the SBOM can be downloaded from
artifact_pathThe path of the OpenContext SBOM artifact YAML
artifact_urlThe release URL of the OpenContext SBOM artifact YAML or WORKSPACE_ARTIFACT if upload_yaml is false