From 3cdefaaf2d176e7c77bd99c52363752fd5af722f Mon Sep 17 00:00:00 2001 From: Vinny Barton Date: Wed, 7 Oct 2026 21:39:16 -0400 Subject: [PATCH] fix: configure shared workflows for Go library --- .github/workflows/generate-and-scan-sbom.yml | 1 + .github/workflows/rearm.yml | 1 + .github/workflows/release.yml | 1 + 3 files changed, 3 insertions(+) diff --git a/.github/workflows/generate-and-scan-sbom.yml b/.github/workflows/generate-and-scan-sbom.yml index 39d893e..0ea6fc6 100644 --- a/.github/workflows/generate-and-scan-sbom.yml +++ b/.github/workflows/generate-and-scan-sbom.yml @@ -15,6 +15,7 @@ jobs: uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-source-sbom + component-type: library fail-on-vulnerabilities: true file-prefix: sbom-validator-${{ github.run_id }} go-version-file: go.mod diff --git a/.github/workflows/rearm.yml b/.github/workflows/rearm.yml index c998af8..239bf64 100644 --- a/.github/workflows/rearm.yml +++ b/.github/workflows/rearm.yml @@ -59,6 +59,7 @@ jobs: rearm-api-url: ${{ vars.REARM_API_URL }} secure-sbom-api-url: ${{ vars.SECURE_SBOM_API_URL }} secure-sbom-signing-key-id: ${{ vars.SECURE_SBOM_SIGNING_KEY_ID }} + source-code-sbom-type: go secrets: rearm-api-id: ${{ secrets.REARM_COMPONENT_API_ID }} rearm-api-key: ${{ secrets.REARM_COMPONENT_API_KEY }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e348157..1afa9d6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,6 +16,7 @@ jobs: uses: shiftleftcyber/supply-chain-workflows/.github/workflows/source-sbom-go.yml@v1 with: artifact-name: signed-release-sbom + component-type: library fail-on-vulnerabilities: true file-prefix: sbom-validator-${{ github.ref_name }} go-version-file: go.mod