Skip to content

Commit 1f033ed

Browse files
committed
Move back at the root #1729
Signed-off-by: tdruez <tdruez@nexb.com>
1 parent efe91c1 commit 1f033ed

1 file changed

Lines changed: 5 additions & 5 deletions

File tree

.github/workflows/sca-integrations/trivy.yml renamed to .github/workflows/sca-integration-trivy.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
name: Generate SBOM with Trivy
1+
name: Generate SBOM with Trivy and load in ScanCode.io
22

33
on:
44
workflow_dispatch:
@@ -14,7 +14,7 @@ env:
1414
IMAGE_REFERENCE: "python:3.13.0-slim"
1515

1616
jobs:
17-
generate-sbom:
17+
generate-and-load-sbom:
1818
runs-on: ubuntu-24.04
1919
steps:
2020
- name: Run Trivy in CycloneDX SBOM mode
@@ -27,20 +27,20 @@ jobs:
2727
scanners: "vuln,license"
2828
version: "latest"
2929

30-
- name: Upload Trivy report as a Github artifact
30+
- name: Upload Trivy SBOM as a Github artifact
3131
uses: actions/upload-artifact@v4
3232
with:
3333
name: upload-trivy-sbom-report
3434
path: "${{ github.workspace }}/trivy-report.sbom.json"
3535
retention-days: 20
3636

37-
- name: Load the Trivy report SBOM into ScanCode.io
37+
- name: Load the Trivy SBOM into ScanCode.io
3838
uses: aboutcode-org/scancode-action@file-as-inputs-path
3939
with:
4040
pipelines: "load_sbom"
4141
inputs-path: "${{ github.workspace }}/trivy-report.sbom.json"
4242

43-
- name: Test running scanpipe for checking the loaded content
43+
- name: Check the SBOM was properly loaded in ScanCode.io
4444
shell: bash
4545
run: |
4646
scanpipe shell --command "from scanpipe.models import DiscoveredPackage; package_manager = DiscoveredPackage.objects; assert package_manager.count() > 90; assert package_manager.vulnerable().count() > 40;"

0 commit comments

Comments
 (0)