scality/Scality Upload SBOM Action

Upload an SBOM (Software Bill Of Materials) to Dependency Track.

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Stale
License
None
namedescriptionrequireddefault
urlDependency Track server URLno
api-keyDependency Track API keyno
project-sbomPath to the SBOM file to uploadno
project-sbom-listPath to a text file containing a list of SBOM files to upload (one per line)no
project-sbom-dirDirectory containing SBOM files to upload as child projectsno
project-nameProject name in Dependency Trackno""
parent-project-nameParent project name in Dependency Track (if applicable)no""
project-versionProject version in Dependency Trackno""
parent-project-versionParent project version in Dependency Track (if applicable)no""
project-descriptionProject description in Dependency Trackno""
project-uuidProject UUID in Dependency Track (if known)no""
project-prefixPrefix to add to project nameno""
project-suffixSuffix to add to project nameno""
project-classifierProject classifier in Dependency TracknoAPPLICATION
parent-project-classifierParent project classifier in Dependency Track (if applicable)noAPPLICATION
project-collection-logicProject collection logic in Dependency TracknoNONE
parent-project-collection-logicParent project collection logic in Dependency Track (if applicable)noNONE
project-tagsComma-separated list of tags to apply to the projectno""
is-latestSet the 'latest' flag on the uploaded project versionnofalse
auto-detect-latestAutomatically detect and set the latest version flag based on semantic versioningnotrue
api-timeoutAPI request timeout in seconds (increase for slow networks or large projects)no300
dry-runEnable dry run mode (no actual uploads, just validation and logging)nofalse
delete-on-version-suffix-matchDelete existing leaf project when version matches suffix patternnofalse
delete-version-suffix-patternCase-insensitive regex evaluated against project version when delete is enablednodev
generate-hierarchyGenerate hierarchical configuration from nested SBOM directory structurenofalse
hierarchy-input-dirInput directory containing nested SBOM structure for hierarchy generationno""
hierarchy-output-fileOutput file path for generated hierarchy configuration JSONno""
hierarchy-uploadAutomatically upload the generated hierarchy to Dependency Tracknofalse
namedescription
upload-summaryJSON summary of uploaded projects and versions
projects-createdNumber of new projects created
projects-updatedNumber of existing projects updated
sboms-uploadedNumber of SBOM files uploaded
latest-flags-updatedNumber of latest flags updated
latest-versionsList of projects where latest flag was updated
upload-errorsList of any upload errors encountered
hierarchy-config-filePath to the generated hierarchy configuration file
hierarchy-projects-countTotal number of projects in the generated hierarchy
hierarchy-top-level-projectsNumber of top-level projects in the hierarchy