feat: add apiUrl to action [MFST-4249]

.github/workflows/main.yml

@@ -8,6 +8,7 @@ on:
   push:
     branches:
       - "main"
+      - "feat-api-uri"
 
 permissions:
   id-token: write
@@ -22,8 +23,9 @@ jobs:
         uses: actions/checkout@v4
 
       - name: generate SBOM
-        uses: manifest-cyber/manifest-github-action@main
+        uses: manifest-cyber/manifest-github-action@feat-api-uri
         with:
           apiKey: ${{ secrets.MANIFEST_API_KEY }}
           asset-labels: "github-action, production"
           generator: "syft"
+          apiUri: "https://api.manifest.cyber"

action.yml

@@ -85,6 +85,10 @@ inputs:
     description: "set the SBOM as active. Expects either `true` or `false`."
     required: false
 
+  apiUri:
+    description: "set the Manifest API endpoint URI."
+    required: false
+
 runs:
   using: "node20"
   main: "index.js"

index.js

@@ -156,11 +156,11 @@ async function generateSBOM(
   }
 
   if (generator === "syft" && generatorVersion === "") {
-    generatorVersion = "v1.11.1";
+    generatorVersion = "v1.16.0";
   }
 
   if (generator === "trivy" && generatorVersion === "") {
-    generatorVersion = "v0.54.1";
+    generatorVersion = "v0.57.0";
   }
 
   const installCommand =
@@ -239,6 +239,7 @@ try {
     core.getInput("bomLabels") ||
     core.getInput("asset-labels") ||
     "";
+  const apiURI = core.getInput("apiURI");
   const productLabels = core.getInput("product-labels") || "";
   const productId = core.getInput("product-id") || "";
 
@@ -312,6 +313,9 @@ try {
                 `publish`,
                 `--ignore-validation="true"`,
               ];
+              if (apiURI) {
+                publishCommandParts.push(`--api-uri="${apiURI}"`);
+              }
               if (source) {
                 publishCommandParts.push(`--source="${source}"`);
               }