feat: SBOM generation and OmniBOR build provenance (CRA compliance) #35
MarkAtwoodsbom.yml
on: pull_request
gen-sbom unit tests
12s
SBOM standalone (no autotools)
16s
SBOM integration (linux)
4m 19s
SBOM integration (macos)
56s
bomsh integration (linux)
3m 14s
Annotations
1 error and 6 warnings
|
SBOM integration (linux)
Process completed with exit code 1.
|
|
gen-sbom unit tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM integration (macos)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM integration (macos)
The following taps are not trusted:
aws/tap
Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required.
Untap them with:
brew untap aws/tap
Trust specific formulae, casks and commands with:
brew trust --formula <user>/<tap>/<formula>
brew trust --cask <user>/<tap>/<cask>
brew trust --command <user>/<tap>/<command>
Whole-tap trust is broader and includes all current and future formulae,
casks and commands from the listed taps. Trust whole taps with:
brew trust aws/tap
To disable trust checks:
export HOMEBREW_NO_REQUIRE_TAP_TRUST=1
This is not recommended and will be removed in a later release.
For more information, see:
https://docs.brew.sh/Tap-Trust
|
|
SBOM standalone (no autotools)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
SBOM integration (linux)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
bomsh integration (linux)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
bomsh-omnibor-5ec6dfbf3ba8ddc0b825cffb9903592120ff9d2c
|
999 KB |
sha256:3a106205115863cc1fd6de917cee9fb8492e16ad8586f272c56e9b0f2b8c023b
|
|
|
bomsh-trace-diag-5ec6dfbf3ba8ddc0b825cffb9903592120ff9d2c
|
132 KB |
sha256:41bb79b41079d6fb04a58eba2b9aafbf7e2ff4059d10d0152cbd82548de2d535
|
|
|
sbom-integration-linux-5ec6dfbf3ba8ddc0b825cffb9903592120ff9d2c
|
4.31 KB |
sha256:23d8262762f4ff3f04601dc287358c1688314fcafd0872ffd1ae9e30f8bc9cd5
|
|
|
sbom-integration-macos-5ec6dfbf3ba8ddc0b825cffb9903592120ff9d2c
|
4.23 KB |
sha256:87aa6674cd64509812a856306e507a23f1e98937e7f7a5031b1b0663f22082fe
|
|
|
sbom-standalone-5ec6dfbf3ba8ddc0b825cffb9903592120ff9d2c
|
19.8 KB |
sha256:c4585582968596273164911bc34d6f44b0e449c4dc9e82869ab65d7c375d91a2
|
|