Befator-Inc-Firmen-Netzwerk/MSYS2-packages
3
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 1 Wiki Activity

generate-srcinfo: map ignored CVEs into the cdx sbom

Browse Source 
See ef673c9802
This commit is contained in:
Christoph Reiter 2025-09-07 15:17:50 +02:00
parent 57af559e25
commit 0eecc2cf48
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/generate-srcinfo.yml vendored
View File

@ -92,7 +92,7 @@ jobs:
run: |
msys2-sbom create srcinfo.json.gz sbom.cdx.json
./bin/grype sbom:sbom.cdx.json -o cyclonedx-json=sbom.vuln.cdx.json -o json=sbom.grype.json
msys2-sbom fixup sbom.vuln.cdx.json --grype-json sbom.grype.json
msys2-sbom fixup sbom.vuln.cdx.json --grype-json sbom.grype.json --srcinfo-cache srcinfo.json.gz
- uses: actions/upload-artifact@v4
with: