Commit 1be63cb8 authored by Cédric OLIVIER's avatar Cédric OLIVIER
Browse files

Merge branch 'fixSyftRetrieve' into 'master' 

fix: more reliable retrieve url for Syft

Closes #65

See merge request to-be-continuous/python!99
parents 96c214e6 5d83eaad

templates/gitlab-ci-python.yml

+2 −1
Original line number Diff line number Diff line
@@ -1061,7 +1061,8 @@ py-sbom: 
      if [[ -z "$PYTHON_SBOM_SYFT_URL" ]]

      then

        log_info "Syft version unset: retrieve latest version..."

        PYTHON_SBOM_SYFT_URL="https://github.com$(curl https://github.com/anchore/syft/releases -s | sed -rn 's/.*href="(.*_linux_amd64\.tar\.gz)".*/\1/p')"

        syft_version=$(curl -Ls -o /dev/null -w %{url_effective} https://github.com/anchore/syft/releases/latest | grep -o '[^/v]*$')

        PYTHON_SBOM_SYFT_URL="https://github.com/anchore/syft/releases/download/v${syft_version}/syft_${syft_version}_linux_amd64.tar.gz"

        log_info "... use latest Syft version: \\e[32m$PYTHON_SBOM_SYFT_URL\\e[0m"

      fi

      python_sbom_syft="$PIP_CACHE_DIR/syft-$(echo "$PYTHON_SBOM_SYFT_URL" | md5sum | cut -d" " -f1)"