threatdetective/Upload SBOM to Threat Detective
Upload a CycloneDX SBOM using OIDC workload identity federation
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| project-id | Threat Detective project ID | yes | — |
| sbom-file | Path to CycloneDX JSON SBOM file | yes | — |
| api-url | Threat Detective API base URL | no | https://app.threatdetectivehq.com |
| software-item-name | Target software item name (inferred from SBOM if omitted) | no | — |
| version | Version label (inferred from SBOM if omitted) | no | — |
| auto-create | Create software item if it does not exist | no | true |
| audience | OIDC audience claim | no | https://app.threatdetectivehq.com |
| wait-for-completion | Poll the import status until processing completes | no | false |
| poll-timeout | Maximum seconds to wait for import completion | no | 120 |
Outputs
| name | description |
|---|---|
| status | Import status: queued, existing, completed, or failed |
| import-id | Import job ID (if queued) |
| software-item-version-id | ID of the created or matched software item version |
| software-item-name | Name of the software item |
| version | Version created or matched |
| component-count | Number of components imported |