feat(sca): CycloneDX SBOM export via --format cyclonedx (closes #31) #64
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: CLA Assistant | |
| on: | |
| issue_comment: | |
| types: [created] | |
| pull_request_target: | |
| types: [opened, closed, synchronize] | |
| permissions: | |
| contents: write # write CLA signatures file | |
| pull-requests: write # comment on PRs | |
| statuses: write # set commit status check | |
| jobs: | |
| cla-check: | |
| name: CLA Check | |
| runs-on: ubuntu-latest | |
| # Skip when the PR author is the repo owner or an automated bot. | |
| # The CLA Assistant action otherwise inspects every committer (including | |
| # Co-Authored-By trailers), and any non-allowlisted co-author triggers a | |
| # write to the signatures file on main — which is branch-protected and | |
| # rejects direct pushes, breaking the check for the owner's own PRs. | |
| if: github.actor != 'dependabot[bot]' && github.actor != 'filipi86' | |
| steps: | |
| - name: CLA Assistant | |
| uses: contributor-assistant/github-action@v2.6.1 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| path-to-signatures: ".github/cla-signatures.json" | |
| path-to-document: "https://github.com/filipi86/drogonsec/blob/main/CLA.md" | |
| branch: main | |
| allowlist: filipi86,bot*,*[bot] | |
| custom-notsigned-prcomment: | | |
| Thank you for your contribution to **DrogonSec**! | |
| Before we can merge this pull request, we need you to sign our **Contributor License Agreement (CLA)**. | |
| The CLA ensures you retain ownership of your contribution while granting the project the rights needed to maintain and develop DrogonSec — including any future enterprise products built on top of the open-source core. | |
| Please read the [CLA document](https://github.com/filipi86/drogonsec/blob/main/CLA.md) and sign by commenting below: | |
| ``` | |
| I have read the CLA Document and I hereby sign the CLA | |
| ``` | |
| This is a one-time action — once signed, all future PRs from your account are automatically approved. | |
| custom-signed-prcomment: | | |
| CLA signed. Thank you for contributing to DrogonSec! | |
| custom-allsigned-prcomment: | | |
| All contributors have signed the CLA. This check has passed. |