ci: install syft bin & add source sbom gen

telekom · Jan 3, 2025 · 4b03d83 · 4b03d83
1 parent 7a7257e
commit 4b03d83
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 1 deletion.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -20,6 +20,9 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
+
+      - name: install syft
+        uses: anchore/sbom-action/[email protected]
 
       - name: Build snapshot artifacts
         uses: goreleaser/goreleaser-action@v6

diff --git a/.goreleaser.yaml b/.goreleaser.yaml
@@ -41,4 +41,7 @@ nfpms:
       - rpm
       - apk
 sboms:
-  - artifacts: archive
+  - id: archive
+    artifacts: archive
+  - id: source
+    artifacts: source