From 9e3bcdef4252047fb311a8e78b5153c1149b24f5 Mon Sep 17 00:00:00 2001 From: Felix Braeunling Date: Mon, 14 Sep 2026 10:52:58 +0200 Subject: [PATCH] fix: pin CycloneDX Verion To prevent unexpected breakage of the SBOM Upload due to a mismatched server supported and uploaded SBOM CDX Version this change pins the CycloneDX version of the SBOM generator to a known supported version. --- .github/actions/sbom-generation/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/sbom-generation/action.yml b/.github/actions/sbom-generation/action.yml index d5d2901..bdb0d62 100644 --- a/.github/actions/sbom-generation/action.yml +++ b/.github/actions/sbom-generation/action.yml @@ -18,7 +18,7 @@ runs: uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 with: file: ${{ inputs.file-to-scan }} - format: cyclonedx-json + format: cyclonedx-json@1.6 artifact-name: ${{ inputs.artifact-name-prefix }}_sbom.cdx.json upload-release-assets: false @@ -28,4 +28,4 @@ runs: file: ${{ inputs.file-to-scan }} format: spdx-json artifact-name: ${{ inputs.artifact-name-prefix }}_sbom.spdx.json - upload-release-assets: false \ No newline at end of file + upload-release-assets: false