Add support for uploading to GitHub dependency API

Signed-off-by: Keith Zantow <kzantow@gmail.com>
anchore · Mar 16, 2022 · f5323ff · f5323ff
1 parent 497938e
commit f5323ff
Show file tree

Hide file tree

Showing 19 changed files with 935 additions and 143 deletions.
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -71,7 +71,7 @@ jobs:
         run: |
           for distro in alpine centos debian; do
             docker build -t localhost:5000/match-coverage/$distro ./tests/fixtures/image-$distro-match-coverage
-            docker push localhost:5000/match-coverage/$distro:latest
+            docker push localhost:5000/match-coverage/${distro}:latest
           done
       - run: npm ci
       - run: npm test

diff --git a/action.yml b/action.yml
@@ -36,6 +36,15 @@ inputs:
     description: "The name to use for the SBOM file generated by this action"
     required: false
 
+  syft-version:
+    required: false
+    description: "Syft version string to use"
+
+  dependency-snapshot:
+    required: false
+    description: "Upload to GitHub dependency snapshot API"
+    default: "false"
+
 runs:
   using: "node12"
   main: "dist/runSyftAction/index.js"
diff --git a/dist/attachReleaseAssets/index.js b/dist/attachReleaseAssets/index.js