disable uploading sbom to release (#223)

* disable uploading sbom to release * disable uploading sbom as an artifact in ci
kosli-dev · May 13, 2024 · 47827f5 · 47827f5
1 parent cee63d9
commit 47827f5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/.github/workflows/binary_provenance.yml b/.github/workflows/binary_provenance.yml
@@ -67,6 +67,8 @@ jobs:
             file: ${{matrix.artifact.path}}
             format: 'spdx-json'
             output-file: '${{matrix.artifact.template_name}}-sbom.spdx.json'
+            upload-artifact: false
+            upload-release-assets: false
 
         - name: Publish SBOM
           uses: anchore/sbom-action/publish-sbom@v0

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -111,6 +111,7 @@ jobs:
         image: ${{ env.IMAGE }}:${{ inputs.tag }}
         format: 'spdx-json'
         output-file: 'sbom.spdx.json'
+        upload-artifact: false
 
 
     - name: Attest SBOM to Github