Skip to content

Commit fc3ae04

Browse files
committed
Added new workflow
1 parent 1a13eed commit fc3ae04

9 files changed

Lines changed: 498 additions & 1 deletion

File tree

.github/workflows/new.yml

Lines changed: 55 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,55 @@
1+
name: Generate SBOM using npx cdxgen
2+
3+
on:
4+
push:
5+
branches: [ main ]
6+
pull_request:
7+
branches: [ main ]
8+
workflow_dispatch:
9+
10+
jobs:
11+
sbom:
12+
runs-on: ubuntu-latest
13+
14+
steps:
15+
- name: Checkout repository
16+
uses: actions/checkout@v4
17+
with:
18+
fetch-depth: 0
19+
20+
- name: Set up Node.js
21+
uses: actions/setup-node@v4
22+
with:
23+
node-version: "18"
24+
25+
- name: Install cdxgen (local)
26+
run: npm install @cyclonedx/cdxgen --no-save --no-audit --no-fund
27+
28+
- name: Create output directory
29+
run: mkdir -p artifacts/sbom
30+
31+
- name: Generate SBOM - JSON
32+
run: |
33+
npx cdxgen \
34+
--no-install-deps \
35+
-r \
36+
-o artifacts/sbom/bom.json \
37+
.
38+
39+
- name: Generate SBOM - XML
40+
run: |
41+
npx cdxgen \
42+
--no-install-deps \
43+
-r \
44+
-f xml \
45+
-o artifacts/sbom/bom.xml \
46+
.
47+
48+
- name: List generated files
49+
run: ls -l artifacts/sbom
50+
51+
- name: Upload SBOM artifacts
52+
uses: actions/upload-artifact@v4
53+
with:
54+
name: sbom
55+
path: artifacts/sbom
-17 Bytes
Binary file not shown.
-1 Bytes
Binary file not shown.
-18.1 KB
Binary file not shown.
-17 Bytes
Binary file not shown.

.gradle/9.0.0/gc.properties

Whitespace-only changes.
0 Bytes
Binary file not shown.
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
#Fri Nov 21 16:18:56 IST 2025
1+
#Fri Nov 21 16:36:22 IST 2025
22
gradle.version=8.5

0 commit comments

Comments
 (0)