update sbom pipeline

- upload SARIF report
Gepardec · Jul 5, 2024 · 3b28476 · 3b28476
1 parent b489d4f
commit 3b28476
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml
@@ -25,7 +25,12 @@ jobs:
 
       - name: Scan current project
         uses: anchore/scan-action@v3
+        id: scan
         with:
           path: "."
           fail-build: false
-          output-format: table
+
+      - name: Upload anchore scan SARIF report
+        uses: github/codeql-action/upload-sarif@v2
+        with:
+          sarif_file: ${{ steps.scan.outputs.sarif }}