Use sbom file for grype

Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-02-11 11:56:18 +01:00
parent 6965bd2f01
commit 015ebe43dc
2 changed files with 2 additions and 2 deletions
--- a/.github/workflows/make.yaml
+++ b/.github/workflows/make.yaml
@@ -122,7 +122,7 @@ jobs:
        run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH"
      - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
        with:
-          path: ./
+          sbom: "sbom.json"
          fail-build: true
          severity-cutoff: critical
          output-format: table
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -97,7 +97,7 @@ jobs:
      - name: Run vulnerability scan
        uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
        with:
-          path: ./
+          sbom: "sbom.json"
          fail-build: true
          severity-cutoff: critical