Adding anchore for SBOM signing during release (#3987)

Signed-off-by: jkowall <jkowall@kowall.net> Signed-off-by: jkowall <jkowall@kowall.net> Co-authored-by: Yuri Shkuro <yurishkuro@users.noreply.github.com>
jaegertracing · Oct 19, 2022 · 79fedc2 · 79fedc2
1 parent ef58f8e
commit 79fedc2
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.github/workflows/ci-release.yml b/.github/workflows/ci-release.yml
@@ -69,3 +69,8 @@ jobs:
       env:
         DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
         QUAY_TOKEN: ${{ secrets.QUAY_TOKEN }}
+
+    - name: SBOM Generation
+      uses: anchore/sbom-action@v0
+      with:
+        artifact-name: jaeger-SBOM.spdx.json