feat(ci): include project name and version in sbom filename

This commit is contained in:
Simon Cornet 2025-04-24 10:05:55 +02:00
commit 6f2f2b6f38

View file

@ -40,15 +40,17 @@ jobs:
# generate sbom
- name: "generate sbom"
run: |
syft go.mod -o spdx-json=sbom.spdx.json
syft go.mod -o cyclonedx-json=sbom.cyclonedx.json
APP_NAME="gogitlabber"
VERSION=${GITHUB_REF#refs/tags/}
syft go.mod -o spdx-json=${APP_NAME}_${VERSION}_sbom.spdx.json
syft go.mod -o cyclonedx-json=${APP_NAME}_${VERSION}_sbom.cyclonedx.json
# upload sbom to release
- name: "upload sbom to release"
uses: "softprops/action-gh-release@v1"
with:
files: |
sbom.spdx.json
sbom.cyclonedx.json
gogitlabber_*_sbom.spdx.json
gogitlabber_*_sbom.cyclonedx.json
env:
GITHUB_TOKEN: ${{ secrets.GORELEASER_GITHUB_TOKEN }}