From ee24a55ec818d6703959eea7087b42fe377b9927 Mon Sep 17 00:00:00 2001 From: "maximilian.schubert@telekom.de" Date: Fri, 3 Jan 2025 13:29:11 +0100 Subject: [PATCH] ci: finally add syft install to all ci actions where it is needed --- .github/workflows/e2e_checks.yml | 3 +++ .github/workflows/release.yml | 3 +++ 2 files changed, 6 insertions(+) diff --git a/.github/workflows/e2e_checks.yml b/.github/workflows/e2e_checks.yml index d26f3b56..41a6c602 100644 --- a/.github/workflows/e2e_checks.yml +++ b/.github/workflows/e2e_checks.yml @@ -44,6 +44,9 @@ jobs: "network_plugin": "kathara/katharanp_vde" }' > ~/.config/kathara.conf + - name: Install syft for sbom generation + uses: anchore/sbom-action/download-syft@v0.17.9 + - name: Build binary for e2e uses: goreleaser/goreleaser-action@v6 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ca399963..effece78 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,6 +37,9 @@ jobs: registry: mtr.devops.telekom.de username: ${{ secrets.MTR_USERNAME }} password: ${{ secrets.MTR_PASSWORD }} + + - name: Install syft for sbom generation + uses: anchore/sbom-action/download-syft@v0.17.9 - name: Build, push & release uses: goreleaser/goreleaser-action@v6