Skip to content

Commit 502f182

Browse files
authored
Fix Anchore SBOM artifact naming issue (#668)
Update Anchore SBOM action to latest version The workflow was failing with 'artifact name image.spdx.json is not valid' error. This appears to be due to using an old pinned version of the action from 2022. - Updated from specific commit hash to v0 (latest stable version) - This should resolve intermittent artifact upload failures - The newer version includes fixes for various artifact naming issues Fixes the error seen in: https://github.com/mitre/vulcan/actions/runs/15525433955/job/43704379533
1 parent def3cae commit 502f182

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/anchore-syft.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: Build the Docker image
3232
run: docker build . --file Dockerfile --tag localbuild/testimage:latest
3333
- name: Scan the image and upload dependency results
34-
uses: anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a
34+
uses: anchore/sbom-action@v0
3535
with:
3636
image: "localbuild/testimage:latest"
3737
artifact-name: image.spdx.json

0 commit comments

Comments
 (0)