actions/attest-sbom
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bump actions/attest from 2.0.0 to 2.0.1 (#133)

Browse Source 
Signed-off-by: Brian DeHamer <[email protected]>
This commit is contained in:
Brian DeHamer
2024-12-06 07:36:30 -08:00
committed by GitHub
parent 1455967b1b
commit 34581d8068
2 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+8 -7
View File
@@ -45,7 +45,7 @@ attest:
your SBOM has been generated: your SBOM has been generated:
```yaml ```yaml
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v2
with: with:
subject-path: '<PATH TO ARTIFACT>' subject-path: '<PATH TO ARTIFACT>'
sbom-path: '<PATH TO SBOM>' sbom-path: '<PATH TO SBOM>'
@@ -60,7 +60,7 @@ attest:
See [action.yml](action.yml) See [action.yml](action.yml)
```yaml ```yaml
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v2
with: with:
# Path to the artifact serving as the subject of the attestation. Must # Path to the artifact serving as the subject of the attestation. Must
# specify exactly one of "subject-path" or "subject-digest". May contain a # specify exactly one of "subject-path" or "subject-digest". May contain a
@@ -136,6 +136,7 @@ on:
jobs: jobs:
build: build:
runs-on: ubuntu-latest
permissions: permissions:
id-token: write id-token: write
contents: read contents: read
@@ -152,7 +153,7 @@ jobs:
format: 'spdx-json' format: 'spdx-json'
output-file: 'sbom.spdx.json' output-file: 'sbom.spdx.json'
- name: Attest - name: Attest
uses: actions/attest-sbom@v1 uses: actions/attest-sbom@v2
with: with:
subject-path: '${{ github.workspace }}/my-app' subject-path: '${{ github.workspace }}/my-app'
sbom-path: 'sbom.spdx.json' sbom-path: 'sbom.spdx.json'
@@ -164,7 +165,7 @@ If you are generating multiple artifacts, you can attest all of them at the same
time by using a wildcard in the `subject-path` input. time by using a wildcard in the `subject-path` input.
```yaml ```yaml
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v2
with: with:
subject-path: 'dist/**/my-bin-*' subject-path: 'dist/**/my-bin-*'
sbom-path: '${{ github.workspace }}/my-bin.sbom.spdx.json' sbom-path: '${{ github.workspace }}/my-bin.sbom.spdx.json'
@@ -177,13 +178,13 @@ Alternatively, you can explicitly list multiple subjects with either a comma or
newline delimited list: newline delimited list:
```yaml ```yaml
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v2
with: with:
subject-path: 'dist/foo, dist/bar' subject-path: 'dist/foo, dist/bar'
``` ```
```yaml ```yaml
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v2
with: with:
subject-path: | subject-path: |
dist/foo dist/foo
@@ -246,7 +247,7 @@ jobs:
format: 'cyclonedx-json' format: 'cyclonedx-json'
output-file: 'sbom.cyclonedx.json' output-file: 'sbom.cyclonedx.json'
- name: Attest - name: Attest
uses: actions/attest-sbom@v1 uses: actions/attest-sbom@v2
id: attest id: attest
with: with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
action.yml
+1 -1
View File
@@ -59,7 +59,7 @@ runs:
id: generate-sbom-predicate id: generate-sbom-predicate
with: with:
sbom-path: ${{ inputs.sbom-path }} sbom-path: ${{ inputs.sbom-path }}
- uses: actions/[email protected].0 - uses: actions/[email protected].1
id: attest id: attest
with: with:
subject-path: ${{ inputs.subject-path }} subject-path: ${{ inputs.subject-path }}