Add release sbom to Github workflow (#3)

circlefin · Sep 17, 2024 · 8aca6be · 8aca6be
1 parent f614d15
commit 8aca6be
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -20,7 +20,8 @@ on:
     branches: [master]
   pull_request:
 
-permissions: read-all
+permissions:
+  contents: write
 
 jobs:
   run_ci_tests:
@@ -54,3 +55,7 @@ jobs:
     uses: circlefin/circle-public-github-workflows/.github/workflows/pr-scan.yaml@v1
     with:
       allow-reciprocal-licenses: false
+
+  release-sbom:
+    if: github.event_name == 'push'
+    uses: circlefin/circle-public-github-workflows/.github/workflows/attach-release-assets.yaml@v1