add custom sbom generation #275
mwrockci-main-pull-request-checks.yml
on: pull_request
call-ci-main-pr-check-pipeline
/
Checkout repository
5s
Echo stub version
2s
call-ci-main-pr-check-pipeline
/
Pre-compilation checks
6s
call-ci-main-pr-check-pipeline
/
Build/compilation and unit tests (CI)
0s
call-ci-main-pr-check-pipeline
/
...
/
Export SBOM from GitHub Dependency Graph API
9s
call-ci-main-pr-check-pipeline
/
...
/
Blackduck SCA Scan (PURPLE)
call-ci-main-pr-check-pipeline
/
...
/
Generate MSFT SBOM
0s
call-ci-main-pr-check-pipeline
/
...
/
license_scout
call-ci-main-pr-check-pipeline
/
...
/
Build and upload Docker image
call-ci-main-pr-check-pipeline
/
...
/
Complexity and SLOC generation
24s
call-ci-main-pr-check-pipeline
/
Language-specific pre-compilation steps and linting
call-ci-main-pr-check-pipeline
/
Language-agnostic pre-compilation steps
call-ci-main-pr-check-pipeline
/
...
/
Trufflehog
13s
call-ci-main-pr-check-pipeline
/
Grype scan
call-ci-main-pr-check-pipeline
/
...
/
BlackDuck Polaris SAST scan
call-ci-main-pr-check-pipeline
/
...
/
Grype scan (Linux)
call-ci-main-pr-check-pipeline
/
...
/
Grype scan (MacOS)
call-ci-main-pr-check-pipeline
/
...
/
Grype scan (Windows)
call-ci-main-pr-check-pipeline
/
Creating packaged binaries
call-ci-main-pr-check-pipeline
/
Detect SBOM version for application
Matrix: call-ci-main-pr-check-pipeline / Unit tests
call-ci-main-pr-check-pipeline
/
...
/
irfan
call-ci-main-pr-check-pipeline
/
...
/
Grype vulnerability scan
call-ci-main-pr-check-pipeline
/
...
/
Wiz CLI container image scan
call-ci-main-pr-check-pipeline
/
Creating Habitat packages
call-ci-main-pr-check-pipeline
/
Publishing Habitat packages to Builder
0s
call-ci-main-pr-check-pipeline
/
Publishing packages
0s
call-ci-main-pr-check-pipeline
/
Grype scan of Habitat packages
0s
call-ci-main-pr-check-pipeline
/
Grype scan of Habitat packages (Windows)
0s
Annotations
2 warnings
|
call-ci-main-pr-check-pipeline / Generating SBOM / Export SBOM from GitHub Dependency Graph API
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
call-ci-main-pr-check-pipeline / Source code complexity checks / Complexity and SLOC generation
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
habitat-sh-builder-2020-merge-1.0.0-20260731001510-GitHub-sbom.csv
|
29.9 KB |
sha256:de0e03c733f5121b5d7ddaaf923bea2f0a6ee3c1b5e63dca39d26cda9ffc986f
|
|
|
habitat-sh-builder-2020-merge-20260731001527-scc-complexity.html
|
15.5 KB |
sha256:06a0952f678a748eebb719fa8f5b12d46e4adea4e839a34ddaecb37002d73b7b
|
|
|
habitat-sh-builder-2020-merge-20260731001527-scc-complexity.json
|
19.4 KB |
sha256:d24075158e563226ea895b1e56a71dd319ef956a9178c173876ec439ce67fd1d
|
|
|
habitat-sh-builder-2020-merge-20260731001527-scc-complexity.txt
|
1.05 KB |
sha256:1cb8d104e7e60ff9d985e5c30b76e4c310577b0742a67685ce5eccdbe2e8b53d
|
|
|
habitat-sh-builder-20260731001510-GitHub-sbom.json
|
82.4 KB |
sha256:04af6a7fabef385b8a6b4af5de80cb582c66def2259acd21088aff83132f4552
|
|