chains-project / sbom-files

Long term storage of software bills of materials (sbom) https://arxiv.org/pdf/2303.11102.pdf
6 stars 1 forks source link

Use GitHub API to export SBOM #10

Open algomaster99 opened 1 year ago

algomaster99 commented 1 year ago

GitHub has a feature to export SBOM from their API now - https://docs.github.com/en/rest/dependency-graph/sboms?apiVersion=2022-11-28#export-a-software-bill-of-materials-sbom-for-a-repository.

We should use it in frozen-* repositories instead of this action.