docs: document the --update-product flag for snapshot inventory recon… #27
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Generate and Publish SBOM | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| on: | |
| push: | |
| branches: | |
| - "main" | |
| permissions: | |
| id-token: write | |
| contents: read # This is required for actions/checkout@v2 | |
| jobs: | |
| generate-and-publish-sbom: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout source code | |
| uses: actions/checkout@v3 | |
| # Generate and transmita copy of our generated SBOM to Manifest | |
| - name: Transmit generated SBOM to Manifest | |
| uses: manifest-cyber/manifest-github-action@main | |
| id: transmit | |
| with: | |
| # Generate an API key at https://app.manifestcyber.com/organization | |
| # Store the key as a secret in Github, and reference it below | |
| # Do not share this key - this allows the holder to upload SBOM's to Manifest on your behalf | |
| apiKey: ${{ secrets.MANIFEST_API_KEY }} | |