diff --git a/.github/workflows/generate-and-scan-sbom.yml b/.github/workflows/generate-and-scan-sbom.yml index 39d893e..0ea6fc6 100644 --- a/.github/workflows/generate-and-scan-sbom.yml +++ b/.github/workflows/generate-and-scan-sbom.yml @@ -15,6 +15,7 @@ jobs: uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-source-sbom + component-type: library fail-on-vulnerabilities: true file-prefix: sbom-validator-${{ github.run_id }} go-version-file: go.mod diff --git a/.github/workflows/rearm.yml b/.github/workflows/rearm.yml index c998af8..239bf64 100644 --- a/.github/workflows/rearm.yml +++ b/.github/workflows/rearm.yml @@ -59,6 +59,7 @@ jobs: rearm-api-url: ${{ vars.REARM_API_URL }} secure-sbom-api-url: ${{ vars.SECURE_SBOM_API_URL }} secure-sbom-signing-key-id: ${{ vars.SECURE_SBOM_SIGNING_KEY_ID }} + source-code-sbom-type: go secrets: rearm-api-id: ${{ secrets.REARM_COMPONENT_API_ID }} rearm-api-key: ${{ secrets.REARM_COMPONENT_API_KEY }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e348157..1afa9d6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,6 +16,7 @@ jobs: uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-release-sbom + component-type: library fail-on-vulnerabilities: true file-prefix: sbom-validator-${{ github.ref_name }} go-version-file: go.mod