build: add support for SBOMs

abhimanyu003 · Aug 29, 2024 · fe19380 · fe19380
1 parent cc361b3
commit fe19380
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
@@ -15,6 +15,8 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version: 1.22
+      - name: Install syft
+        uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2
       - name: Set up Snapcraft
         run: |
           sudo apt-get update

diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -117,3 +117,6 @@ chocolateys:
     api_key: "{{ .Env.CHOCOLATEY_API_KEY }}"
     source_repo: "https://push.chocolatey.org/"
     skip_publish: true
+
+sboms:
+  - artifacts: archive