diff --git a/.github/workflows/sca-integration-cdxgen.yml b/.github/workflows/sca-integration-cdxgen.yml index 0af013ab99..9b1c462832 100644 --- a/.github/workflows/sca-integration-cdxgen.yml +++ b/.github/workflows/sca-integration-cdxgen.yml @@ -34,7 +34,8 @@ jobs: --output cdxgen-sbom.cdx.json \ --spec-version 1.6 \ --json-pretty - + env: + CDXGEN_TEMP_DIR: ${{ runner.temp }}/cdxgen-temp - name: Upload SBOM as GitHub Artifact uses: actions/upload-artifact@v4 with: diff --git a/.github/workflows/sca-integration-depscan.yml b/.github/workflows/sca-integration-depscan.yml index adfb76804f..a11c4001ad 100644 --- a/.github/workflows/sca-integration-depscan.yml +++ b/.github/workflows/sca-integration-depscan.yml @@ -24,10 +24,10 @@ jobs: generate-and-load-sbom: runs-on: ubuntu-24.04 steps: - - name: Install OWASP dep-scan + - name: Install OWASP dep-scan v6 beta run: | sudo npm install -g @cyclonedx/cdxgen - pip install owasp-depscan + pip install --pre owasp-depscan[all] - name: Generate SBOM with OWASP dep-scan run: | @@ -36,6 +36,10 @@ jobs: --type docker \ --reports-dir reports \ --explain + env: + CDXGEN_TEMP_DIR: ${{ runner.temp }}/cdxgen-temp + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + PYTHONUTF8: 1 - name: Upload SBOM as GitHub Artifact uses: actions/upload-artifact@v4