search

actions / attest-sbom

Action for generating SBOM attestations for workflow artifacts
MIT License
14 stars 4 forks source link

remove anchore/sbom-action #45

Closed bdehamer closed 4 months ago

bdehamer commented 4 months ago

Per: https://github.com/github/package-security/issues/1649

Remove the use of anchore/sbom-action (Syft) from the attest-sbom action. An explicit SBOM must now be provided as input to the action.

In a follow-up PR we'll include some examples of using Syft to generate an SBOM and then pass that in to the attest-sbom action.