ci-sbom.yml

name: CI-SBOM

on:
  push:
    branches:
      - "master"
  pull_request:

jobs:
  spdx_creation:
    name: Create Software Bill of Materials
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v2
      - name: Install
        run: |
          sudo apt update && sudo apt install cargo
          cargo install cargo-bom
          cargo install cargo-license
      # flake-ctl
      - name: Run SPDX Creation for flake-ctl
        run: |
          cd flake-ctl/flake-ctl
          cargo bom
      - name: Get Dependency Licenses of flake-ctl
        run: |
          cd flake-ctl
          cargo license

      # Pilots
      - name: Run SPDX for pilots
        run: |
          cd pilots
          cargo bom
      - name: Get Dependency Licenses of Pilots
        run: |
          cd pilots
          cargo license

      # guesttvm-tools
      - name: Run SPDX guesttvm-tools
        run: |
          cd pilots/src/firecracker-pilot/guestvm-tools/sci
          cargo bom
      - name: Get Dependency Licenses guesttvm-tools
        run: |
          cd pilots/src/firecracker-pilot/guestvm-tools/sci
          cargo license

      # firecracker-service
      - name: Run SPDX firecracker-service
        run: |
          cd pilots/src/firecracker-pilot/firecracker-service/service
          cargo bom
      - name: Get Dependency Licenses firecracker-service
        run: |
          cd pilots/src/firecracker-pilot/firecracker-service/service
          cargo license

      # firecracker-service-communication
      - name: Run SPDX firecracker-service-communication
        run: |
          cd pilots/src/firecracker-pilot/firecracker-service/service-communication
          cargo bom
      - name: Get Dependency Licenses firecracker-service-communication
        run: |
          cd pilots/src/firecracker-pilot/firecracker-service/service-communication
          cargo license