https://github.com/ckotzbauer/sbom-diff-action
Comment SBOM diffs as PR comments.
https://github.com/ckotzbauer/sbom-diff-action
action diff gihub-actions sbom syft
Last synced: about 2 months ago
JSON representation
Comment SBOM diffs as PR comments.
- Host: GitHub
- URL: https://github.com/ckotzbauer/sbom-diff-action
- Owner: ckotzbauer
- License: mit
- Created: 2022-01-06T16:32:05.000Z (over 3 years ago)
- Default Branch: main
- Last Pushed: 2024-10-12T01:43:40.000Z (8 months ago)
- Last Synced: 2024-10-16T08:16:51.222Z (8 months ago)
- Topics: action, diff, gihub-actions, sbom, syft
- Language: Shell
- Homepage:
- Size: 114 KB
- Stars: 3
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- License: LICENSE
Awesome Lists containing this project
README
# SBOM-Diff-Action
> Create SBOM diffs from PR changes.
## Usage
```yaml
on:
pull_request:
types:
- opened
- edited
- reopened
- synchronize
jobs:
sbom-diff:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v2
with:
fetch-depth: "0"
- name: Create SBOM-Diff
uses: ckotzbauer/sbom-diff-action@v1
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
SCAN_TARGET: file:go.mod
```
## Environment Variables
| Name | Description | Required |
| --- | --- | --- |
| `GITHUB_TOKEN` | `GITHUB_TOKEN` or a `repo` scoped [PAT](https://docs.github.com/en/github/authenticating-to-github/creating-a-personal-access-token). | `true` |
| `SCAN_TARGET` | Target to create SBOM from with Syft | `true` |
Every [documented source](https://github.com/anchore/syft#supported-sources) from Syft is allowed as `SCAN_TARGET`. The detected differences are added as PR comment.
## License
[MIT](LICENSE)
## Contributing
Please refer to the [Contribution guildelines](https://github.com/ckotzbauer/.github/blob/main/CONTRIBUTING.md).
## Code of conduct
Please refer to the [Conduct guildelines](https://github.com/ckotzbauer/.github/blob/main/CODE_OF_CONDUCT.md).
## Security
Please refer to the [Security process](https://github.com/ckotzbauer/.github/blob/main/SECURITY.md).