feat (docker): Create docker image SBOM on release

mitre · Aug 9, 2024 · b4a1a6c · b4a1a6c
1 parent 7e3046d
commit b4a1a6c
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/.github/workflows/dockerhub.yml b/.github/workflows/dockerhub.yml
@@ -63,3 +63,14 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
           readme-filepath: ./dist/dockerhub/README.md
+
+  build-sbom:
+    needs: docker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Create docker image SBOM
+        uses: anchore/sbom-action@v0
+        with:
+          image: mitre/hipcheck:latest
+          format: spdx-json
+          artifact-name: hipcheck-docker-sbom.spdx