forked from claw/flaskpaste
ci: fix bandit nosec and cyclonedx-py syntax
This commit is contained in:
@@ -208,7 +208,7 @@ jobs:
|
||||
- name: Generate SBOM
|
||||
run: |
|
||||
# Generate CycloneDX SBOM for supply chain transparency
|
||||
cyclonedx-py requirements requirements.txt -o sbom.json --format json
|
||||
cyclonedx-py requirements requirements.txt -o sbom.json --of json
|
||||
echo "SBOM generated with $(jq '.components | length' sbom.json) components"
|
||||
|
||||
- name: Validate SBOM
|
||||
|
||||
Reference in New Issue
Block a user