Switched Syft SBOM generation to runtime-only venv scan.
Audit / Dependencies (push) Successful in 7s
CD / Publish (push) Successful in 5s
CI / Formatting (push) Successful in 5s
CI / Linting (push) Successful in 4s
CI / Tests (push) Successful in 7s
CI / Type Checking (push) Successful in 9s
CI / Spelling (push) Successful in 4s
Audit / Dependencies (push) Successful in 7s
CD / Publish (push) Successful in 5s
CI / Formatting (push) Successful in 5s
CI / Linting (push) Successful in 4s
CI / Tests (push) Successful in 7s
CI / Type Checking (push) Successful in 9s
CI / Spelling (push) Successful in 4s
This commit is contained in:
@@ -22,7 +22,7 @@ jobs:
|
|||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
- name: Install dependencies
|
- name: Install dependencies
|
||||||
run: uv sync --locked
|
run: uv sync --locked --no-dev
|
||||||
|
|
||||||
- name: Generate package metadata
|
- name: Generate package metadata
|
||||||
id: metadata
|
id: metadata
|
||||||
@@ -38,8 +38,9 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
SYFT_CHECK_FOR_APP_UPDATE: "false"
|
SYFT_CHECK_FOR_APP_UPDATE: "false"
|
||||||
run: |
|
run: |
|
||||||
syft scan dir:. \
|
syft scan dir:.venv \
|
||||||
--override-default-catalogers python-package-cataloger \
|
--override-default-catalogers python-installed-package-cataloger \
|
||||||
|
--select-catalogers=-file \
|
||||||
--source-name git.logal.dev/LogalDeveloper/Crabstero \
|
--source-name git.logal.dev/LogalDeveloper/Crabstero \
|
||||||
--source-version "${{ steps.metadata.outputs.version }}" \
|
--source-version "${{ steps.metadata.outputs.version }}" \
|
||||||
--output syft-table \
|
--output syft-table \
|
||||||
|
|||||||
Reference in New Issue
Block a user