ci: Add a step to upload the sarif file as a workflow artifact. (tekt…

…ronix#157) Signed-off-by: v12ganesh [email protected]
v12ganesh · Mar 4, 2024 · 570bb41 · 570bb41
1 parent de03c38
commit 570bb41
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/.github/workflows/sbom-scan.yml b/.github/workflows/sbom-scan.yml
@@ -33,7 +33,13 @@ jobs:
           sbom: ${{ github.event.repository.name }}-sbom.spdx.json
           fail-build: true
           severity-cutoff: low
-      - name: Upload SBOM scan SARIF report
+      - name: Upload SBOM scan SARIF report as a workflow artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: sarif_artifact
+          path: ${{ steps.scan.outputs.sarif }}
+          if-no-files-found: error
+      - name: Upload SBOM scan SARIF report to GitHub UI Security tab
         if: ${{ github.event_name != 'pull_request' }}
         uses: github/codeql-action/upload-sarif@v3
         with: