From 0cfeb6b96cabe7842cbb8fd6f6f14581a104b8fe Mon Sep 17 00:00:00 2001 From: Troy Havelock Date: Wed, 4 Oct 2023 12:03:37 -0400 Subject: [PATCH] Updates to actions --- .github/workflows/generate-sbom.yml | 16 +++++++++++++--- 1 file changed, 13 insertions(+), 3 deletions(-) diff --git a/.github/workflows/generate-sbom.yml b/.github/workflows/generate-sbom.yml index dcf75fe0b33..a3f57588e93 100644 --- a/.github/workflows/generate-sbom.yml +++ b/.github/workflows/generate-sbom.yml @@ -4,28 +4,38 @@ on: workflow_dispatch: workflow_call: +env: + ANGULAR_CLI_VERSION: 13 jobs: sbom-open-source: runs-on: ubuntu-latest steps: - - uses: actions/checkout@master + - name: Checkout Repo + uses: actions/checkout@master + - name: Use Node.js uses: actions/setup-node@v1 with: node-version: 18.4 + - name: "Install CLI tools" run: npm install -g @angular/cli@$ANGULAR_CLI_VERSION + - name: Install minimalistically run: | npm install --ignore-scripts cd frontend npm install --ignore-scripts --legacy-peer-deps - - uses: snyk/actions/setup@master + + - name: Setup Snyk + uses: snyk/actions/setup@master + - name: Snyk SBOM Generate run: snyk sbom --all-projects --exclude=build --format=cyclonedx1.4+json --json-file-output=sbom-cyclonedx.json # Exclude the 'build' directory env: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} - - name: 'Upload SBOM' + + - name: Upload SBOM uses: actions/upload-artifact@v3 with: name: sbom-cyclonedx