sbom tool setup (#141)

* Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * merge from master (#12) * SBOM manifest generation (#138) * Adding SBOM generation step (#135) Signed-off-by: MD Ashique <[email protected]> * Java lib release (#137) * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> --------- Signed-off-by: MD Ashique <[email protected]> --------- Signed-off-by: MD Ashique <[email protected]> * Java lib release (#139) * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> --------- Signed-off-by: MD Ashique <[email protected]> --------- Signed-off-by: MD Ashique <[email protected]> * Adding SBOM generation step Signed-off-by: MD Ashique <[email protected]> --------- Signed-off-by: MD Ashique <[email protected]>
Azure · Aug 4, 2023 · 711c8be · 711c8be
1 parent ab657df
commit 711c8be
Showing 1 changed file with 7 additions and 3 deletions.
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
@@ -106,9 +106,13 @@ jobs:
       - name: Generate SBOM manifest
         if: startsWith(github.ref, 'refs/tags/v')
         run: |
-          curl -Lo sbom-tool https://github.com/microsoft/sbom-tool/releases/latest/download/sbom-tool-linux-x64
-          chmod +x sbom-tool
-          ./sbom-tool generate -b ${{ env.MAVEN_OUTDIR }} -pn "Azure Functions Dapr Java Triggers and Bindings" -pv "${{ env.REL_VERSION }}"
+          sudo apt-get update
+          sudo apt-get install wget
+          wget https://github.com/microsoft/sbom-tool/releases/download/v1.2.0/sbom-tool-linux-x64
+          chmod +x sbom-tool-linux-x64
+          ls -l sbom-tool-linux-x64
+          sudo mv sbom-tool-linux-x64 /usr/local/bin/sbom-tool
+          sbom-tool generate -b ${{ env.MAVEN_OUTDIR }} -pn "Azure Functions Dapr Java Triggers and Bindings" -pv "${{ env.REL_VERSION }}"
         working-directory: ${{ env.JAVA_LIB_WORKING_DIRECTORY }}
       - name: Upload .Net artifacts
         uses: actions/upload-artifact@master