Skip to content

Commit 80c78b2

Browse files
committed
build: build-sbom input
Signed-off-by: CrazyMax <1951866+crazy-max@users.noreply.github.com>
1 parent d640474 commit 80c78b2

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

.github/workflows/build.yml

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,10 @@ on:
5959
type: string
6060
description: "List of target platforms to build"
6161
required: false
62+
build-sbom:
63+
type: string
64+
description: "Generate SBOM attestation for the build (shorthand for --attest=type=sbom)"
65+
required: false
6266
secrets:
6367
login-password:
6468
description: "Password or personal access token used to log against the Docker registry"
@@ -106,7 +110,7 @@ jobs:
106110
platforms: ${{ inputs.build-platforms }}
107111
tags: ${{ steps.meta.outputs.tags }}
108112
outputs: type=image,oci-artifact=true,push=${{ inputs.push }}
109-
sbom: true
113+
sbom: ${{ inputs.build-sbom }}
110114
labels: ${{ inputs.set-meta-labels && steps.meta.outputs.labels || '' }}
111115
annotations: ${{ inputs.set-meta-annotations && steps.meta.outputs.annotations || '' }}
112116
github-token: ${{ secrets.github-token || github.token }}
@@ -194,4 +198,3 @@ jobs:
194198
});
195199
}
196200
}
197-

0 commit comments

Comments
 (0)