diff --git a/.github/workflows/ci-release-sbom.yaml b/.github/workflows/ci-release-sbom.yaml new file mode 100644 index 0000000000..d76a1a3b8e --- /dev/null +++ b/.github/workflows/ci-release-sbom.yaml @@ -0,0 +1,18 @@ +name: SBOM + +on: + release: + types: [published] + +jobs: + sbom: + runs-on: ubuntu-latest + steps: + - name: Checkout + uses: actions/checkout@v3 + with: + ref: ${{ github.ref_name }} + - name: Anchore SBOM Action + uses: anchore/sbom-action@v0.12.0 + with: + format: cyclonedx-json \ No newline at end of file