luke
/
magic
mirror of https://github.com/RTimothyEdwards/magic.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

feat: add generate_sbom boolean input (disabled by default) and gate SBOM steps on it 

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
This commit is contained in:
Darryl L. Miles 2026-07-21 19:33:16 +01:00 committed by R. Timothy Edwards
parent e44d25db2f
commit 7bfbc53b11
4 changed files with 36 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
.github/workflows/appimage10.yml vendored
View File

@ -23,6 +23,11 @@ on:
description: 'AppImageTool release channel/tag (default: continuous)'
type: string
default: 'continuous'
# NOTE: SBOM generation is experimental and not ready for production use
generate_sbom:
description: 'Generate SBOM (Software Bill of Materials) - experimental, not for production use'
type: boolean
default: false
name: CI-appimage10
@ -399,6 +404,7 @@ jobs:
${{ github.workspace }}/appimage/10/RELEASE-NOTES-EL10.txt
- name: Generate SBOM
if: ${{ inputs.generate_sbom }}
uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
with:
image: docker:magic_build
@ -408,6 +414,7 @@ jobs:
upload-release-assets: false
- name: Apply SBOM license metadata
if: ${{ inputs.generate_sbom }}
run: |
cd appimage/10
sbom_file="sbom-${MAGIC_APPIMAGE_OUTPUT_FILENAME}.spdx.json"
@ -435,13 +442,14 @@ jobs:
mv "$sbom_file.tmp" "$sbom_file"
- name: Upload SBOM Release Asset
if: ${{ env.MY_GITHUB_TAG != '' }}
if: ${{ env.MY_GITHUB_TAG != '' && inputs.generate_sbom }}
uses: softprops/action-gh-release@v3
with:
files: |
${{ github.workspace }}/appimage/10/sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json
- name: Upload SBOM Artifact
if: ${{ inputs.generate_sbom }}
uses: actions/upload-artifact@v7
with:
name: sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json

10
.github/workflows/appimage7.yml vendored
View File

@ -23,6 +23,11 @@ on:
description: 'AppImageTool release channel/tag (default: continuous)'
type: string
default: 'continuous'
# NOTE: SBOM generation is experimental and not ready for production use
generate_sbom:
description: 'Generate SBOM (Software Bill of Materials) - experimental, not for production use'
type: boolean
default: false
name: CI-appimage7
@ -399,6 +404,7 @@ jobs:
${{ github.workspace }}/appimage/7/RELEASE-NOTES-EL7.txt
- name: Generate SBOM
if: ${{ inputs.generate_sbom }}
uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
with:
image: docker:magic_build
@ -408,6 +414,7 @@ jobs:
upload-release-assets: false
- name: Apply SBOM license metadata
if: ${{ inputs.generate_sbom }}
run: |
cd appimage/7
sbom_file="sbom-${MAGIC_APPIMAGE_OUTPUT_FILENAME}.spdx.json"
@ -435,13 +442,14 @@ jobs:
mv "$sbom_file.tmp" "$sbom_file"
- name: Upload SBOM Release Asset
if: ${{ env.MY_GITHUB_TAG != '' }}
if: ${{ env.MY_GITHUB_TAG != '' && inputs.generate_sbom }}
uses: softprops/action-gh-release@v3
with:
files: |
${{ github.workspace }}/appimage/7/sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json
- name: Upload SBOM Artifact
if: ${{ inputs.generate_sbom }}
uses: actions/upload-artifact@v7
with:
name: sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json

10
.github/workflows/appimage8.yml vendored
View File

@ -23,6 +23,11 @@ on:
description: 'AppImageTool release channel/tag (default: continuous)'
type: string
default: 'continuous'
# NOTE: SBOM generation is experimental and not ready for production use
generate_sbom:
description: 'Generate SBOM (Software Bill of Materials) - experimental, not for production use'
type: boolean
default: false
name: CI-appimage8
@ -399,6 +404,7 @@ jobs:
${{ github.workspace }}/appimage/8/RELEASE-NOTES-EL8.txt
- name: Generate SBOM
if: ${{ inputs.generate_sbom }}
uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
with:
image: docker:magic_build
@ -408,6 +414,7 @@ jobs:
upload-release-assets: false
- name: Apply SBOM license metadata
if: ${{ inputs.generate_sbom }}
run: |
cd appimage/8
sbom_file="sbom-${MAGIC_APPIMAGE_OUTPUT_FILENAME}.spdx.json"
@ -435,13 +442,14 @@ jobs:
mv "$sbom_file.tmp" "$sbom_file"
- name: Upload SBOM Release Asset
if: ${{ env.MY_GITHUB_TAG != '' }}
if: ${{ env.MY_GITHUB_TAG != '' && inputs.generate_sbom }}
uses: softprops/action-gh-release@v3
with:
files: |
${{ github.workspace }}/appimage/8/sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json
- name: Upload SBOM Artifact
if: ${{ inputs.generate_sbom }}
uses: actions/upload-artifact@v7
with:
name: sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json

10
.github/workflows/appimage9.yml vendored
View File

@ -23,6 +23,11 @@ on:
description: 'AppImageTool release channel/tag (default: continuous)'
type: string
default: 'continuous'
# NOTE: SBOM generation is experimental and not ready for production use
generate_sbom:
description: 'Generate SBOM (Software Bill of Materials) - experimental, not for production use'
type: boolean
default: false
name: CI-appimage9
@ -399,6 +404,7 @@ jobs:
${{ github.workspace }}/appimage/9/RELEASE-NOTES-EL9.txt
- name: Generate SBOM
if: ${{ inputs.generate_sbom }}
uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
with:
image: docker:magic_build
@ -408,6 +414,7 @@ jobs:
upload-release-assets: false
- name: Apply SBOM license metadata
if: ${{ inputs.generate_sbom }}
run: |
cd appimage/9
sbom_file="sbom-${MAGIC_APPIMAGE_OUTPUT_FILENAME}.spdx.json"
@ -435,13 +442,14 @@ jobs:
mv "$sbom_file.tmp" "$sbom_file"
- name: Upload SBOM Release Asset
if: ${{ env.MY_GITHUB_TAG != '' }}
if: ${{ env.MY_GITHUB_TAG != '' && inputs.generate_sbom }}
uses: softprops/action-gh-release@v3
with:
files: |
${{ github.workspace }}/appimage/9/sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json
- name: Upload SBOM Artifact
if: ${{ inputs.generate_sbom }}
uses: actions/upload-artifact@v7
with:
name: sbom-${{env.MAGIC_APPIMAGE_OUTPUT_FILENAME}}.spdx.json