add syft to github workflow

OpenRailAssociation · Sep 19, 2024 · 0dcebdf · 0dcebdf
1 parent 2693255
commit 0dcebdf
Showing 1 changed file with 12 additions and 3 deletions.
diff --git a/.github/workflows/selftest.yaml b/.github/workflows/selftest.yaml
@@ -11,8 +11,17 @@ on:
   pull_request:
 
 jobs:
-  # Generate SBOM using cdxgen, but with NPMJS package, not Docker container
-  sbom-gen:
+  # Generate SBOM using syft
+  sbom-gen-cdxgen:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - run: echo $GITHUB_PATH
+      - run: echo $PATH
+      - run: ls -l ~/.local/bin
+
+  # Generate SBOM using cdxgen (npm package)
+  sbom-gen-cdxgen:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v4
@@ -29,7 +38,7 @@ jobs:
   # Enrich the generated SBOM
   sbom-enrich:
     runs-on: ubuntu-22.04
-    needs: sbom-gen
+    needs: sbom-gen-cdxgen
     steps:
       - uses: actions/checkout@v4
       - uses: ./.github/actions/poetrybuild