NowSecure Mobile SBOM #6
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow uses actions that are not certified by GitHub. | ||
| # They are provided by a third-party and are governed by | ||
| # separate terms of service, privacy policy, and support | ||
| # documentation. | ||
| # | ||
| # NowSecure: The Mobile Security Experts <https://www.nowsecure.com/>. | ||
| # | ||
| # To use this workflow, you must have a token for NowSecure Platform. If you are a NowSecure customer, | ||
| # you can find it in NowSecure Platform. | ||
| # | ||
| # If you *are not* a NowSecure customer, click here to sign up for a free trial to get access: | ||
| # <https://bit.ly/ns-git-sbom>. | ||
| # | ||
| # Instructions: | ||
| # | ||
| # 1. In the settings for your repository, click "Secrets" then "New repository secret". Name the secret "NS_TOKEN" and | ||
| # paste in your Platform token. If you do not have a Platform token, or wish to create a new one for GitHub, visit | ||
| # NowSecure Platform and go to "Profile & Preferences" then create a token labelled "GitHub". | ||
| # | ||
| # 2. Follow the annotated workflow below and make any necessary modifications then save the workflow to your repository | ||
| # and review the "Dependency graph" tab in the "Insights" pane once the action has run. | ||
| name: "NowSecure Mobile SBOM" | ||
| on: | ||
| push: | ||
| branches: [ "master" ] | ||
| pull_request: | ||
| # The branches below must be a subset of the branches above | ||
| branches: [ "master" ] | ||
| schedule: | ||
| - cron: '41 5 * * 3' | ||
| permissions: | ||
| contents: read | ||
| jobs: | ||
| nowsecure: | ||
| name: NowSecure Mobile SBOM | ||
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: read | ||
| steps: | ||
| - name: Checkout code | ||
| uses: actions/checkout@v3 | ||
| - name: Build your application | ||
| run: ./gradlew assembleDebug # Update this to build your Android or iOS application | ||
| - name: NowSecure upload app | ||
| uses: nowsecure/nowsecure-sbom-action@ecb731b6f17a83fa53f756f9dae2ec7034c5ed7c | ||
| with: | ||
| token: ${{ secrets.NS_TOKEN }} | ||
| app_file: app-debug.apk # Update this to a path to your .ipa or .apk | ||
| group_id: {{ groupId }} # Update this to your desired Platform group ID | ||
