github action: upload SBOMs to release

eclipse-opendut · Feb 2, 2024 · b912d9c · b912d9c
1 parent ffcc785
commit b912d9c
Show file tree

Hide file tree

Showing 3 changed files with 9 additions and 4 deletions.
diff --git a/.github/workflows/job-publish-release.yaml b/.github/workflows/job-publish-release.yaml
@@ -14,11 +14,16 @@ jobs:
     permissions:
       contents: write
     steps:
-    - name: Download Artifacts
+    - name: Download Application Artifacts
       uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935
       with:
         pattern: "*-${{ github.sha }}.tar.gz"
 
+    - name: Download SBOM Files
+      uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935
+      with:
+        pattern: "opendut-sbom"
+
     - uses: ncipollo/release-action@6c75be85e571768fa31b40abf38de58ba0397db5
       with:
-        artifacts: "*-${{ github.sha }}.tar.gz/*"
+        artifacts: "*-${{ github.sha }}.tar.gz/*,opendut-sbom/*"
diff --git a/.github/workflows/job-sbom.yaml b/.github/workflows/job-sbom.yaml
@@ -28,4 +28,4 @@ jobs:
           name: opendut-sbom
           path: ./target/ci/sbom/
           if-no-files-found: error
-          retention-days: 30
+          retention-days: 1
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -71,7 +71,7 @@ jobs:
       runs-on: "${{ vars.OPENDUT_GH_RUNNER_LARGE }}"
 
   publish-release:
-    needs: [ bundle-carl, bundle-cleo, bundle-edgar ]
+    needs: [ bundle-carl, bundle-cleo, bundle-edgar, generate-sbom ]
     uses: ./.github/workflows/job-publish-release.yaml
     permissions:
       contents: write