From f73cc2503fa5180296267b1babebbcc15800c9aa Mon Sep 17 00:00:00 2001 From: Erik Bershel <110455084+erik-bershel@users.noreply.github.com> Date: Sun, 17 Mar 2024 17:41:50 +0100 Subject: [PATCH] Unpin SYFT tool version for Windows images (#9522) * Unpin SYFT tool version for Windows images * Update upload-artifact action version to v4 --- .github/workflows/create_sbom_report.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/create_sbom_report.yml b/.github/workflows/create_sbom_report.yml index 103177a0d..a44c0b2bb 100644 --- a/.github/workflows/create_sbom_report.yml +++ b/.github/workflows/create_sbom_report.yml @@ -55,7 +55,7 @@ jobs: } - name: Install SYFT tool on Windows if: ${{ runner.os == 'Windows' }} - run: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b D:/syft v0.100.0 + run: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b D:/syft - name: Install SYFT tool on Ubuntu or macOS if: ${{ runner.os != 'Windows' }} run: curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin v0.100.0 @@ -74,7 +74,7 @@ jobs: - name: Compress SBOM file run: Compress-Archive sbom.json sbom.json.zip #Upload artifact action - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@v4 with: name: sbom-${{ github.event.client_payload.agentSpec }}-${{ github.event.client_payload.imageVersion }} path: sbom.json.zip