- fixing SBOM publishing for Java

Keeper-Security · Jan 2, 2025 · e9502fa · e9502fa
1 parent e492bb2
commit e9502fa
Showing 1 changed file with 20 additions and 6 deletions.
diff --git a/.github/workflows/reusable.sbom.workflow.yml b/.github/workflows/reusable.sbom.workflow.yml
@@ -278,13 +278,27 @@ jobs:
         if: inputs.project-type == 'java'
         working-directory: ${{ inputs.working-directory }}
         run: |
-          echo "Gradle Home: $GRADLE_USER_HOME"
+          echo "Environment:"
+          echo "JAVA_HOME=$JAVA_HOME"
+          echo "GRADLE_USER_HOME=$GRADLE_USER_HOME"
+          
+          echo "Gradle version and info:"
+          ./gradlew --version
+          
+          echo "Project dependencies:"
+          ./gradlew dependencies --configuration runtimeClasspath
+          
           echo "Project structure:"
-          find . -type f -name "*.jar" || true
-          echo "Gradle cache structure:"
-          find "${GRADLE_USER_HOME}/caches" -type f -name "*.jar" || true
-          echo "Runtime classpath:"
-          ./gradlew -q printRuntimeClasspath
+          find . -type f -name "*.jar"
+          
+          echo "Gradle cache location:"
+          if [ -z "$GRADLE_USER_HOME" ]; then
+            echo "Looking in default ~/.gradle location"
+            ls -la ~/.gradle/caches || true
+          else
+            echo "Looking in $GRADLE_USER_HOME/caches"
+            ls -la $GRADLE_USER_HOME/caches || true
+          fi
 
       - name: Verify Syft Java scanning
         if: inputs.project-type == 'java'