Commit 58f0ed64 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

fix(sbom): add CycloneDX report

parent ae1496f8

templates/gitlab-ci-golang.yml

+8 −5
Original line number Diff line number Diff line
@@ -484,14 +484,17 @@ go-sbom: 
    - mkdir -p -m 777 reports

    - cyclonedx-gomod app -json -output reports/go-sbom.cyclonedx.json $GO_SBOM_OPTS

    - chmod a+r reports/go-sbom.cyclonedx.json

  rules:

    # exclude if disabled

    - if: '$GO_SBOM_DISABLED == "true"'

      when: never

    - !reference [.test-policy, rules]

  artifacts:

    name: "SBOM for golang from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"

    expire_in: 1 week

    when: always

    paths:

      - "$GO_PROJECT_DIR/reports/go-sbom.cyclonedx.json"

    reports:

      cyclonedx: 

        - "$GO_PROJECT_DIR/reports/go-sbom.cyclonedx.json"

  rules:

    # exclude if disabled

    - if: '$GO_SBOM_DISABLED == "true"'

      when: never

    - !reference [.test-policy, rules]