Merge pull request #18 from Workiva/sbom

DSC-10020 - Complete transition to GHA
Workiva · Apr 2, 2024 · 79e9b78 · 79e9b78
2 parents 97cd25c + f033f43
commit 79e9b78
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 15 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -10,6 +10,11 @@ on:
     tags:
       - '**'
 
+permissions:
+  pull-requests: write
+  contents: write
+  id-token: write
+
 jobs:
   standard-dart-checks:
     runs-on: ubuntu-latest
@@ -34,6 +39,11 @@ jobs:
       - name: Analyze code
         run: dart run dart_dev analyze
 
+      - uses: anchore/sbom-action@v0
+        with:
+          path: ./
+          format: cyclonedx-json
+
   test-ddc:
     runs-on: ubuntu-latest
     steps:
@@ -72,4 +82,4 @@ jobs:
         uses: actions/upload-artifact@v2
         with:
           name: dart2js-test-results
-          path: reports/dart2js/test-results.json
+          path: reports/dart2js/test-results.json
diff --git a/Dockerfile b/Dockerfile
diff --git a/skynet.yaml b/skynet.yaml