diff --git a/.github/actions/sbom-convert/action.yml b/.github/actions/sbom-convert/action.yml index 4dcaa3a5..bbb22531 100644 --- a/.github/actions/sbom-convert/action.yml +++ b/.github/actions/sbom-convert/action.yml @@ -4,7 +4,7 @@ runs: steps: - name: Install CycloneDX run: | - wget https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.24.2/cyclonedx-linux-x64 + wget https://github.com/CycloneDX/cyclonedx-cli/releases/download/v0.30.0/cyclonedx-linux-x64 chmod a+x cyclonedx-linux-x64 shell: bash - name: Convert SBOM diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index d5556f10..b4fd47e1 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -13,9 +13,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v4 - name: Set up Python - uses: actions/setup-python@v2 + uses: actions/setup-python@v5 with: python-version: '3.x' - name: Install dependencies @@ -24,8 +24,8 @@ jobs: pip install setuptools wheel twine - name: Generate SBOM run: | - pip install cyclonedx-bom==3.11.7 - cyclonedx-py --e --format json -o cyclonedx-sbom.json + pip install cyclonedx-bom==7.2.2 + cyclonedx-py environment -o cyclonedx-sbom.json - name: Convert SBOM uses: duosecurity/duo_client_python/.github/actions/sbom-convert@master - name: Build and publish