2martens/timetable
1
0
Fork 0
mirror of https://github.com/2martens/tsw-timetable.git synced 2026-10-17 16:06:51 +02:00
Code Issues Activity

ci: Add sbom

Browse Source
This commit is contained in:
2martens
2025-10-03 14:50:04 +02:00
parent 39c27a46d5
commit cbfdc8b211
1 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-image.yaml
+11 -2
View File
@@ -49,13 +49,11 @@ jobs:
run: | run: |
DIGEST_FILE=${{ github.workspace }}/module-deploy/build/jib-image.digest DIGEST_FILE=${{ github.workspace }}/module-deploy/build/jib-image.digest
INDEX_DIGEST=$(cat $DIGEST_FILE) INDEX_DIGEST=$(cat $DIGEST_FILE)
echo "Index digest: $INDEX_DIGEST"
echo "digest=$INDEX_DIGEST" >> $GITHUB_OUTPUT echo "digest=$INDEX_DIGEST" >> $GITHUB_OUTPUT
ARCH_DIGESTS=$(docker manifest inspect 2martens/timetable@$INDEX_DIGEST | jq -r '.manifests[].digest') ARCH_DIGESTS=$(docker manifest inspect 2martens/timetable@$INDEX_DIGEST | jq -r '.manifests[].digest')
n=0 n=0
for d in $ARCH_DIGESTS; do for d in $ARCH_DIGESTS; do
echo "arch${n}=$d" >> $GITHUB_OUTPUT echo "arch${n}=$d" >> $GITHUB_OUTPUT
echo "arch${n} digest=$d"
n=$((n+1)) n=$((n+1))
done done
- name: Perform docker login - name: Perform docker login
@@ -64,9 +62,20 @@ jobs:
registry: docker.io registry: docker.io
username: ${{ secrets.DOCKERHUB_USERNAME }} username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_PASSWORD }} password: ${{ secrets.DOCKERHUB_PASSWORD }}
- uses: anchore/sbom-action@v0
with:
image: docker.io/2martens/timetable
artifact-name: sbom.json
- name: Attest - name: Attest
uses: actions/attest-build-provenance@v3 uses: actions/attest-build-provenance@v3
with: with:
subject-name: index.docker.io/2martens/timetable subject-name: index.docker.io/2martens/timetable
subject-digest: ${{ steps.digest.outputs.digest }} subject-digest: ${{ steps.digest.outputs.digest }}
push-to-registry: true
- name: Generate SBOM attestation
uses: actions/attest-sbom@v2
with:
subject-name: index.docker.io/2martens/timetable
subject-digest: ${{ steps.digest.outputs.digest }}
sbom-path: 'sbom.json'
push-to-registry: true push-to-registry: true