|
1 | 1 | name: Augment SBOM
|
2 | 2 |
|
3 | 3 | on:
|
4 |
| - pull_request: |
5 | 4 | workflow_dispatch:
|
6 | 5 | inputs:
|
7 | 6 | release_version:
|
|
36 | 35 |
|
37 | 36 | - name: Download Linux ARM64 binary
|
38 | 37 | run: |
|
39 |
| - curl -L "https://github.com/mongodb/mongodb-atlas-cli/releases/download/atlascli%2Fv${{ inputs.release_version || '1.42.2' }}/mongodb-atlas-cli_${{ github.event.inputs.release_version || '1.42.2' }}_linux_arm64.tar.gz" \ |
| 38 | + curl -L "https://github.com/mongodb/mongodb-atlas-cli/releases/download/atlascli%2Fv${{ inputs.release_version }}/mongodb-atlas-cli_${{ inputs.release_version }}_linux_arm64.tar.gz" \ |
40 | 39 | -o release.tar.gz
|
41 | 40 |
|
42 | 41 | - name: Extract binary
|
|
45 | 44 |
|
46 | 45 | - name: Generate PURLs from binary
|
47 | 46 | run: |
|
48 |
| - go version -m ./mongodb-atlas-cli_${{ inputs.release_version || '1.42.2' }}_linux_arm64/bin/atlas | \ |
| 47 | + go version -m ./mongodb-atlas-cli_${{ inputs.release_version }}_linux_arm64/bin/atlas | \ |
49 | 48 | awk '$1 == "dep" || $1 == "=>" { print "pkg:golang/" $2 "@" $3 }' | \
|
50 | 49 | LC_ALL=C sort > purls.txt
|
51 | 50 | cat purls.txt
|
@@ -76,19 +75,19 @@ jobs:
|
76 | 75 | --sbom-in "/pwd/sbom_lite.json" \
|
77 | 76 | --repo "${KONDUKTO_REPO}" \
|
78 | 77 | --branch "${KONDUKTO_BRANCH_PREFIX}-linux-arm64" \
|
79 |
| - --sbom-out "/pwd/linux_amd64_augmented_sbom_v${{ inputs.release_version || '1.42.2' }}.json" |
| 78 | + --sbom-out "/pwd/linux_amd64_augmented_sbom_v${{ inputs.release_version }}.json" |
80 | 79 |
|
81 | 80 | - name: Generate SSDLC report
|
82 | 81 | env:
|
83 | 82 | AUTHOR: ${{ github.actor }}
|
84 |
| - VERSION: ${{ inputs.release_version || '1.42.2' }} |
| 83 | + VERSION: ${{ inputs.release_version }} |
85 | 84 | AUGMENTED_SBOM_TEXT: " - See Augmented SBOM manifests (CycloneDX in JSON format):
|
86 |
| - \n - This file has been provided along with this report under the name 'linux_amd64_augmented_sbom_v${{ inputs.release_version || '1.42.2' }}.json'\n" |
| 85 | + \n - This file has been provided along with this report under the name 'linux_amd64_augmented_sbom_v${{ inputs.release_version }}.json'\n" |
87 | 86 | run: ./build/package/gen-ssdlc-report.sh
|
88 | 87 | - name: Upload augmented SBOM as artifact
|
89 | 88 | uses: actions/upload-artifact@v4
|
90 | 89 | with:
|
91 | 90 | name: augmented_sbom_and_ssdlc_report
|
92 | 91 | path: |
|
93 |
| - linux_amd64_augmented_sbom_v${{ inputs.release_version || '1.42.2' }}.json |
94 |
| - ssdlc-compliance-${{ inputs.release_version || '1.42.2' }}.md |
| 92 | + linux_amd64_augmented_sbom_v${{ inputs.release_version }}.json |
| 93 | + ssdlc-compliance-${{ inputs.release_version }}.md |
0 commit comments