Skip to content

Commit

Permalink
Included example SBOM
Browse files Browse the repository at this point in the history
Signed-off-by: nathannaveen <42319948+nathannaveen@users.noreply.github.com>
  • Loading branch information
nathannaveen committed Dec 13, 2023
1 parent 456baa9 commit 8aa3f40
Showing 1 changed file with 34 additions and 17 deletions.
51 changes: 34 additions & 17 deletions .github/workflows/testWorkflow.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -9,23 +9,40 @@ jobs:
runs-on: ubuntu-latest

steps:
- name: Checkout code
uses: actions/checkout@v2
- name: Create SBOM
run: |
echo '{
"SPDXID": "SPDXRef-DOCUMENT",
"spdxVersion": "SPDX-2.2",
"creationInfo": {
"created": "2022-01-01T00:00:00Z",
"creators": ["Person: John Doe"],
"licenseListVersion": "3.6"
},
"name": "Simple-SPDX",
"dataLicense": "CC0-1.0",
"documentNamespace": "http://spdx.org/spdxdocs/spdx-example-1",
"documentDescribes": ["SPDXRef-Package"],
"packages": [{
"SPDXID": "SPDXRef-Package",
"name": "simple-package",
"versionInfo": "1.0",
"packageFileName": "simple-package-1.0",
"downloadLocation": "NOASSERTION",
"filesAnalyzed": false,
"packageVerificationCode": {
"value": "d6a770ba38583ed4bb4525bd96e50461655d2758",
"excludedFileNames": ["excluded_file"]
},
"licenseConcluded": "NOASSERTION",
"licenseDeclared": "NOASSERTION",
"licenseComments": "No comments",
"copyrightText": "2022 John Doe"
}]
}' > sbom.json
- name: Create text file
run: echo "Hello, World!" > output.txt

- name: Upload artifact
uses: actions/upload-artifact@v2
with:
name: output-file
path: output.txt

- name: Create another text file
run: echo "Hello, again!" > output2.txt

- name: Upload another artifact
- name: Upload SBOM
uses: actions/upload-artifact@v2
with:
name: output-file-2
path: output2.txt
name: sbom
path: sbom.json

0 comments on commit 8aa3f40

Please sign in to comment.