BC-8631 generate source SBOM (#56)

hpi-schul-cloud · Feb 17, 2025 · dd3cc78 · dd3cc78
1 parent 274d187
commit dd3cc78
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/.github/workflows/tag.yml b/.github/workflows/tag.yml
@@ -50,3 +50,17 @@ jobs:
           pull: true
           tags: ${{ steps.docker_meta_img_hub.outputs.tags }}
           labels: ${{ steps.docker_meta_img_hub.outputs.labels }}
+
+  create_release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - name: generate sbom via dependency-graph
+        run: gh api repos/${{ github.repository }}/dependency-graph/sbom > dependencies.sbom.json
+        env:
+          GH_TOKEN: ${{ github.token }}
+      - name: create release
+        uses: softprops/action-gh-release@v2
+        with:
+          files: dependencies.sbom.json