ci: install Syft to generate SBOMs on releases

ctfer-io · Dec 17, 2023 · 09f0830 · 09f0830
1 parent ecdf532
commit 09f0830
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml
@@ -20,6 +20,9 @@ jobs:
         with:
           go-version-file: 'go.mod'
           cache: true
+      - name: Install Syft
+        run: |
+          curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
       - name: Import GPG key
         uses: crazy-max/ghaction-import-gpg@v6
         id: import_gpg