Skip to content

Commit 9c2bb47

Browse files
committed
Run deep sbom instead of research one
Signed-off-by: Prabhu Subramanian <prabhu@appthreat.com>
1 parent 84d0a45 commit 9c2bb47

File tree

2 files changed

+4
-2
lines changed

2 files changed

+4
-2
lines changed

.github/workflows/pythonpublish.yml

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,9 @@ jobs:
4848
- name: Generate SBOM with cdxgen
4949
run: |
5050
npm install -g @cyclonedx/cdxgen
51-
cdxgen -t python -o bom.json . --profile research
51+
cdxgen -t python -o bom.json . --deep
52+
env:
53+
FETCH_LICENSE: true
5254
- name: Create Release
5355
id: create_release
5456
if: startsWith(github.ref, 'refs/tags/')

INTEGRATION.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -94,7 +94,7 @@ Refer to the vers [documentation](https://github.com/package-url/purl-spec/blob/
9494
Search the `cve_index` table in the index database first to retrieve any matching cve_id and purl_prefix values. Use these two column values to retrieve the full CVE source information from the `cve_data` table. An example query is shown below:
9595

9696
```sql
97-
SELECT DISTINCT cve_id, type, namespace, name, source_data_hash, json(source_data), json(override_data), vers, purl_prefix FROM cve_data
97+
SELECT DISTINCT cve_id, type, namespace, name, source_data_hash, json(source_data), vers, purl_prefix FROM cve_data
9898
WHERE cve_id = ? AND vers = ? AND purl_prefix = ?
9999
GROUP BY purl_prefix
100100
ORDER BY cve_id DESC;

0 commit comments

Comments
 (0)