https://github.com/codenotary/vcn-notarize-bom-python-github-action

GitHub action that uses the vcn tool from CodeNotary.com to generate and notarize the bill of materials (BoM) for Python projects.
https://github.com/codenotary/vcn-notarize-bom-python-github-action

Last synced: about 2 months ago
JSON representation

GitHub action that uses the vcn tool from CodeNotary.com to generate and notarize the bill of materials (BoM) for Python projects.

• Host: GitHub
• URL: https://github.com/codenotary/vcn-notarize-bom-python-github-action
• Owner: codenotary
• Created: 2021-08-08T11:40:37.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2021-08-09T14:31:05.000Z (over 3 years ago)
• Last Synced: 2024-04-23T17:24:43.666Z (8 months ago)
• Language: Python
• Homepage:
• Size: 8.79 KB
• Stars: 1
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# vcn-notarize-bom-python-github-action

GitHub action that uses the **[vcn](https://github.com/codenotary/vcn)** tool from CodeNotary.com to generate and notarize the bill of materials (BoM) for Python projects. It supports [Pipenv](https://pipenv.pypa.io), [Poetry](https://python-poetry.org) and [pip](https://pypi.org/project/pip/) projects: it accepts _**Pipfile.lock**_, _**poetry.lock**_ or _**requirements.txt**_ files (or directories containing such files) as input.

## How to use it

Have a look in the provided [example workflow](.github/workflows/example.yml).

:bulb: The underlying vcn Docker image can also be run directly (an example is also provided in the same [example workflow](.github/workflows/example.yml)). This way one can **specify any vcn** :boom: flag, not just the ones exposed by the GitHub action.

👉 [This link](https://github.com/marketplace?type=actions&query=publisher%3Acodenotary+) lists all the other GitHub actions that are available from CodeNotary.