Scan src code directory

.github/workflows/anchore-syft.yml

@@ -31,11 +31,17 @@ jobs:
     steps:
     - name: Checkout the code
       uses: actions/checkout@v4
-    - name: Build the Docker image
-      run: docker build . --file Dockerfile --tag localbuild/testimage:latest
-    - name: Scan the image and upload dependency results
-      uses: anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a
+    - name: Scan the src directory and upload dependency results
+      uses: anchore/sbom-action@v0
       with:
-        image: "localbuild/testimage:latest"
-        artifact-name: image.spdx.json
+        path: ./src/
+        artifact-name: src.spdx.json
         dependency-snapshot: true
+    # - name: Build the Docker image
+    #   run: docker build . --file Dockerfile --tag localbuild/testimage:latest
+    # - name: Scan the image and upload dependency results
+    #   uses: anchore/sbom-action@bb716408e75840bbb01e839347cd213767269d4a
+    #   with:
+    #     image: "localbuild/testimage:latest"
+    #     artifact-name: image.spdx.json
+    #     dependency-snapshot: true