Publish Flux Software Bill of Materials (SBOM) in SPDX format

- generate SBOM for Flux Go modules with Syft - publish the SBOM SPDX JSON files to GitHub releases with GoReleaser Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2026-02-13 13:06:56 +00:00 · 2022-01-14 09:48:11 +02:00
parent 677dca0bc4
commit 11296cd94f
2 changed files with 6 additions and 0 deletions
--- a/.goreleaser.yml
+++ b/.goreleaser.yml
@@ -40,6 +40,8 @@ archives:
    format: zip
    files:
      - none*
+sboms:
+  - artifacts: archive
 brews:
  - name: flux
    tap: