From d74a98fe8ffe714dff0aa9f6892ed52f9c7c5f0d Mon Sep 17 00:00:00 2001 From: Mark Ridgwell Date: Mon, 26 Feb 2024 18:07:34 +0000 Subject: [PATCH] [Actions] Updated .github/actions/sbom/action.yml --- .github/actions/sbom/action.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/actions/sbom/action.yml b/.github/actions/sbom/action.yml index feaea42c..900c05a1 100644 --- a/.github/actions/sbom/action.yml +++ b/.github/actions/sbom/action.yml @@ -3,6 +3,9 @@ name: 'Run Software Bill of Materials' description: 'Software Bill of materials' inputs: # GENERAL + GITHUB_TOKEN: + description: 'Github Token' + required: true REPO_VISIBILITY: description: 'Visibility of the repo' required: true @@ -17,8 +20,10 @@ runs: - name: "Create SBOM" uses: anchore/sbom-action@v0.15.8 with: + github-token: ${{inputs.GITHUB_TOKEN}} format: spdx-json output-file: "${{ github.event.repository.name }}-sbom.spdx.json" + config: "${{ github.workspace }}.github/linters/syft.yml" - name: "Create SBOM" shell: bash