added sbom generate

ejahnGithub · May 2, 2024 · 96fed6c · 96fed6c
1 parent c7a1774
commit 96fed6c
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
@@ -51,6 +51,13 @@ jobs:
           subject-name: ${{ inputs.registry }}/ejahngithub/${{ inputs.image_name }}
           subject-digest: ${{ steps.docker_build.outputs.digest }}
           push-to-registry: true
+
+      - name: Generate SBOM for
+        uses: anchore/[email protected]
+        with:
+          format: "spdx-json"
+          output-file: "sbom.json"
+
       - name: Generate SBOM attestation
         uses: actions/attest-sbom@v1
         with: