From 015ebe43dc3ec9fc309642aaf7576f4d4cc61d93 Mon Sep 17 00:00:00 2001 From: Bryan Frimin Date: Wed, 11 Feb 2026 11:56:18 +0100 Subject: [PATCH] Use sbom file for grype Signed-off-by: Bryan Frimin --- .github/workflows/make.yaml | 2 +- .github/workflows/release.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 5b197c2ff..487e81580 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -122,7 +122,7 @@ jobs: run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH" - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1 with: - path: ./ + sbom: "sbom.json" fail-build: true severity-cutoff: critical output-format: table diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index fcbe44b25..941b752e4 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -97,7 +97,7 @@ jobs: - name: Run vulnerability scan uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1 with: - path: ./ + sbom: "sbom.json" fail-build: true severity-cutoff: critical