ci: finally add syft install to all ci actions where it is needed

telekom · Jan 3, 2025 · ee24a55 · ee24a55
1 parent 4b03d83
commit ee24a55
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.github/workflows/e2e_checks.yml b/.github/workflows/e2e_checks.yml
@@ -44,6 +44,9 @@ jobs:
           "network_plugin": "kathara/katharanp_vde"
           }' > ~/.config/kathara.conf
 
+      - name: Install syft for sbom generation
+        uses: anchore/sbom-action/[email protected]
+
       - name: Build binary for e2e
         uses: goreleaser/goreleaser-action@v6
         with:

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -37,6 +37,9 @@ jobs:
           registry: mtr.devops.telekom.de
           username: ${{ secrets.MTR_USERNAME }}
           password: ${{ secrets.MTR_PASSWORD }}
+
+      - name: Install syft for sbom generation
+        uses: anchore/sbom-action/[email protected]
 
       - name: Build, push & release
         uses: goreleaser/goreleaser-action@v6