FUSETOOLS2-2272 - Generate SBom and store it as GitHub Workflow artifact

Signed-off-by: Aurélien Pupier <[email protected]>
KaotoIO · Jan 19, 2024 · 70ece9c · 70ece9c
1 parent b72d441
commit 70ece9c
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -45,6 +45,17 @@ jobs:
       with:
         name: 'vscode-kaoto-vsix'
         path: '*.vsix'
+    - name: Generate SBOM
+      if: matrix.os == 'ubuntu-latest'
+      run: |
+          npm install --global @cyclonedx/cyclonedx-npm
+          cyclonedx-npm --omit dev --output-file manifest.json
+    - name: Store SBOM
+      uses: actions/upload-artifact@v4
+      if: matrix.os == 'ubuntu-latest'
+      with:
+        name: sbom
+        path: manifest.json
     - name: Store VS Code logs
       uses: actions/upload-artifact@v4
       if: always()