diff --git a/.github/workflows/sbom.yaml b/.github/workflows/sbom.yaml index c34d84a65ad21..c8d552019cddc 100644 --- a/.github/workflows/sbom.yaml +++ b/.github/workflows/sbom.yaml @@ -80,8 +80,9 @@ jobs: - name: Merge SBOMs # https://github.com/CycloneDX/cyclonedx-cli#merge-command + # Using v1_3 because with the default (1.6) the upload failed at the DT web interface run: | - cyclonedx merge --input-files bom.composer.xml bom.npm.xml --output-file bom.xml + cyclonedx merge --input-files bom.composer.xml bom.npm.xml --output-file bom.xml --output-version v1_3 # Pass merged BOM to next Job # https://github.com/actions/upload-artifact