Commit 914eee21 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

fix(sbom): add CycloneDX report

parent 3affb0bc

templates/gitlab-ci-sbt.yml

+8 −5
Original line number Diff line number Diff line
@@ -308,17 +308,20 @@ sbt-sbom: 
    - mkdir -p -m 777 reports

    - /syft packages $SBT_SBOM_OPTS -o cyclonedx-json=reports/sbt-sbom.cyclonedx.json

    - chmod a+r reports/sbt-sbom.cyclonedx.json

  rules:

    # exclude if disabled

    - if: '$SBT_SBOM_DISABLED == "true"'

      when: never

    - !reference [.test-policy, rules]

  artifacts:

    name: "SBOM for sbt from $CI_PROJECT_NAME on $CI_COMMIT_REF_SLUG"

    when: always

    expire_in: 1 week

    paths:

      - reports/sbt-sbom.cyclonedx.json

    reports:

      cyclonedx: 

        - reports/sbt-sbom.cyclonedx.json

  rules:

    # exclude if disabled

    - if: '$SBT_SBOM_DISABLED == "true"'

      when: never

    - !reference [.test-policy, rules]



sbt-publish-snapshot:

  extends: .sbt-base