Use newer version of cdxgen

puzzle · Feb 5, 2024 · 85e5046 · 85e5046
1 parent 1edb35e
commit 85e5046
Showing 1 changed file with 8 additions and 10 deletions.
diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml
@@ -18,17 +18,15 @@ jobs:
       - name: Checkout Repository
         uses: actions/checkout@v3
 
-      - name: Install cdxgen
-        run: |
-          npm install -g @cyclonedx/[email protected]
-
-      - name: 'Generate SBOM for ruby dependencies'
-        run: |
-          cdxgen -o ./sbom-ruby.xml -t ruby .
+      - name: 'Generate SBOM for Ruby dependencies'
+        uses: docker://ghcr.io/cyclonedx/cdxgen:v10.0.4
+        with:
+          args: --spec-version 1.4 -o ./sbom-ruby.xml -t ruby .
 
-      - name: 'Generate SBOM for npm dependencies'
-        run: |
-          cdxgen -o ./sbom-npm.xml -t npm .
+      - name: 'Generate SBOM for Node.js dependencies'
+        uses: docker://ghcr.io/cyclonedx/cdxgen:v10.0.4
+        with:
+          args: --spec-version 1.4 -o ./sbom-npm.xml -t npm .
 
       - name: "Show workspace"
         run: |