Skip to content

feat: SBOM generation and OmniBOR build provenance (CRA compliance) #36

feat: SBOM generation and OmniBOR build provenance (CRA compliance)

feat: SBOM generation and OmniBOR build provenance (CRA compliance) #36

Triggered via pull request July 24, 2026 05:33
Status Success
Total duration 6m 9s
Artifacts 5

sbom.yml

on: pull_request
gen-sbom unit tests
11s
gen-sbom unit tests
SBOM standalone (no autotools)
15s
SBOM standalone (no autotools)
SBOM integration (linux)
3m 28s
SBOM integration (linux)
SBOM integration (macos)
1m 31s
SBOM integration (macos)
bomsh integration (linux)
3m 15s
bomsh integration (linux)
Fit to window
Zoom out
Zoom in

Annotations

6 warnings
gen-sbom unit tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM standalone (no autotools)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM integration (macos)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM integration (macos)
The following taps are not trusted: aws/tap Homebrew is currently ignoring formulae, casks and commands from these taps because tap trust is required. Untap them with: brew untap aws/tap Trust specific formulae, casks and commands with: brew trust --formula <user>/<tap>/<formula> brew trust --cask <user>/<tap>/<cask> brew trust --command <user>/<tap>/<command> Whole-tap trust is broader and includes all current and future formulae, casks and commands from the listed taps. Trust whole taps with: brew trust aws/tap To disable trust checks: export HOMEBREW_NO_REQUIRE_TAP_TRUST=1 This is not recommended and will be removed in a later release. For more information, see: https://docs.brew.sh/Tap-Trust
bomsh integration (linux)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
SBOM integration (linux)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Artifacts

Produced during runtime
Name Size Digest
bomsh-omnibor-25b12c9323957a7520209e77df51ea77d5e3a1a6
1000 KB
sha256:056756361fb21127bfb9d0d4a423bb8af2384fcde10ae97d12432813bc2bd41d
bomsh-trace-diag-25b12c9323957a7520209e77df51ea77d5e3a1a6
134 KB
sha256:689ff9df560310a736d28825ec42b1829d055bd2e435dfa9617fc533f95a8bc4
sbom-integration-linux-25b12c9323957a7520209e77df51ea77d5e3a1a6
4.25 KB
sha256:976267dc2f00fac0aecbcace5c3546d2a274c77aa0bb4754a661aad2af496d5d
sbom-integration-macos-25b12c9323957a7520209e77df51ea77d5e3a1a6
4.23 KB
sha256:8c69e40c5da61382c471eae74e6951a7120053f3ce71bfb0870abcc8653833c0
sbom-standalone-25b12c9323957a7520209e77df51ea77d5e3a1a6
19.8 KB
sha256:ae68c64ff645ebdef54109358608a1bdc0006a6be9ac411ea87a5bcd128de0fb