Dynamic SBOM/SCA Anchore #6
ethan42dynamic_sbom_sca_anchore.yml
on: workflow_dispatch
anchore
2m 26s
Annotations
1 error and 1 warning
|
anchore
Unable to upload "dynamic_sca_anchore.sarif" as it is not valid SARIF:
- instance is not allowed to have the additional property "bomFormat"
- instance is not allowed to have the additional property "components"
- instance is not allowed to have the additional property "dependencies"
- instance is not allowed to have the additional property "metadata"
- instance is not allowed to have the additional property "serialNumber"
- instance is not allowed to have the additional property "specVersion"
- instance is not allowed to have the additional property "vulnerabilities"
- instance.version is not one of enum values: 2.1.0
- instance.version is not of a type(s) string
- instance requires property "runs"
|
|
anchore
Failed minimum severity level. Found vulnerabilities with level 'medium' or higher
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
dynamic_sbom_anchore.spdx.json
|
559 KB |
|
|
dynamic_sca_anchore.sarif
|
134 KB |
|