CI: switch to SPDX SBOMs

Let's use this project as a guinea pig for SPDX support in Konflux Signed-off-by: Adam Cmiel <[email protected]>
redhat-appstudio · Jan 31, 2025 · 8566d27 · 8566d27
1 parent 5b1b43a
commit 8566d27
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 0 deletions.
diff --git a/.tekton/rh-syft-pull-request.yaml b/.tekton/rh-syft-pull-request.yaml
@@ -188,6 +188,8 @@ spec:
       params:
       - name: input
         value: $(params.prefetch-input)
+      - name: sbom-type
+        value: spdx
       - name: SOURCE_ARTIFACT
         value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
       - name: ociStorage
@@ -231,6 +233,8 @@ spec:
         - $(params.build-args[*])
       - name: BUILD_ARGS_FILE
         value: $(params.build-args-file)
+      - name: SBOM_TYPE
+        value: spdx
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT

diff --git a/.tekton/rh-syft-push.yaml b/.tekton/rh-syft-push.yaml
@@ -185,6 +185,8 @@ spec:
       params:
       - name: input
         value: $(params.prefetch-input)
+      - name: sbom-type
+        value: spdx
       - name: SOURCE_ARTIFACT
         value: $(tasks.clone-repository.results.SOURCE_ARTIFACT)
       - name: ociStorage
@@ -228,6 +230,8 @@ spec:
         - $(params.build-args[*])
       - name: BUILD_ARGS_FILE
         value: $(params.build-args-file)
+      - name: SBOM_TYPE
+        value: spdx
       - name: SOURCE_ARTIFACT
         value: $(tasks.prefetch-dependencies.results.SOURCE_ARTIFACT)
       - name: CACHI2_ARTIFACT