chore: Use the new SBOM generator tool.

googleapis · Nov 29, 2023 · 8f81a77 · 8f81a77
1 parent 4f747ca
commit 8f81a77
Show file tree

Hide file tree

Showing 2 changed files with 13 additions and 1 deletion.
diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
@@ -7,6 +7,12 @@
       "commands": [
         "release-progress-reporter"
       ]
+    },
+    "Google.Cloud.Tools.SbomGenerator": {
+      "version": "0.3.0",
+      "commands": [
+        "generate-sbom"
+      ]
     }
   }
 }
diff --git a/.kokoro/release.sh b/.kokoro/release.sh
@@ -7,6 +7,8 @@ SCRIPT_DIR=$(dirname "$SCRIPT")
 
 cd $SCRIPT_DIR
 
+# Restore tools, in particular the SBOM generator
+dotnet tool restore
 # Make sure secrets are loaded in a well known location before running releasetool
 source ./populatesecrets.sh
 
@@ -36,4 +38,8 @@ export NUGET_API_KEY="$(cat "$SECRETS_LOCATION"/google-apis-nuget-api-key)"
 
 # Push the changes to nuget.
 cd ./releasebuild/nuget
-for pkg in *.nupkg; do dotnet nuget push -s https://api.nuget.org/v3/index.json -k $NUGET_API_KEY $pkg; done
+
+for pkg in *.nupkg; do
+    dotnet generate-sbom $pkg
+    dotnet nuget push -s https://api.nuget.org/v3/index.json -k $NUGET_API_KEY $pkg;
+done