sonarsource/CycloneDX SBOM action
Generate CycloneDX SBOM with Syft
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| image | The Docker image to scan. | yes | — |
| filename | The generated SBOM file name | yes | — |
| upload-artifact | Attach the SBOM to the workflow | no | true |
| upload-release-assets | Create release and attach the SBOM. Ignored if the release is already published (non-draft). | no | true |
| release-tag | Tag name of the release to attach the SBOM to. Defaults to the tag from GITHUB_REF. Use when the workflow is not running on a tag ref (e.g. workflow_dispatch from a branch). | no | — |
| syft-version | Syft version | no | v1.41.2 |
| registry-username | Registry username | no | — |
| registry-password | Registry password | no | — |
Outputs
no outputs