Merge pull request #966 from jkowalleck/fix/ci-sbom-1

fix CI pipeline for docker SBOM
OWASP · Jun 2, 2024 · f8009f8 · f8009f8
2 parents d61d7e8 + 199e85f
commit f8009f8
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 0 deletions.
diff --git a/.github/workflows/pull_request.yaml b/.github/workflows/pull_request.yaml
@@ -243,6 +243,7 @@ jobs:
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache
           platforms: linux/amd64
+          load: true
 
       - name: fetch app SBOM
         run: docker run --rm --entrypoint tar "$IMAGE_ID" -c boms | tar -xv

diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -279,6 +279,7 @@ jobs:
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache
           platforms: linux/amd64,linux/arm64
+          load: true
 
       - name: fetch app SBOMs
         run: docker run --rm --entrypoint tar "$IMAGE_ID" -c boms | tar -xv

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -427,6 +427,7 @@ jobs:
           cache-from: type=local,src=/tmp/.buildx-cache
           cache-to: type=local,dest=/tmp/.buildx-cache
           platforms: linux/amd64,linux/arm64
+          load: true
 
       - name: fetch app SBOM
         run: docker run --rm --entrypoint tar "$IMAGE_ID" -c boms | tar -xv