Skip to content

ci: send the SBOMs of every release to Dependency-Track - #6

Merged
JanaME merged 1 commit into
mainfrom
ci/sbom
Oct 28, 2026
Merged

JanaME merged 1 commit into
mainfrom
ci/sbom

Conversation

@JanaME

@JanaME JanaME commented Oct 28, 2026 •

Copy link
Copy Markdown
Member

Adds .github/workflows/sbom.yml: on every v* tag the CycloneDX SBOMs of what ships go to the GitHub release and to Dependency-Track, via wp-plugin-sbom.yml and dependency-track-upload.yml from palasthotel/github-workflows v1.4.0. workflow_dispatch gives an already released version its SBOM. See docs/sbom.md.

No release: ci: only, nothing in the payload changes.

@JanaME
JanaME merged commit 28c2ea8 into main Oct 28, 2026
11 checks passed
@JanaME
JanaME deleted the ci/sbom branch October 28, 2026 09:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant