Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: github correlator name when run in matrix build #482

Merged

Conversation

kzantow
Copy link
Contributor

@kzantow kzantow commented Jul 18, 2024

This PR adjusts the correlator name to be based on the artifact-name, if it is specified. This fixes a situation when running the sbom-action in a matrix build and uploading dependency snapshots to the Github dependency submission API.

Fixes #422

@kzantow kzantow requested a review from a team August 14, 2024 17:36
submission.detector.version = "";

expect(submission.job).toBeDefined()
expect(submission.job.correlator).toContain("my-matrix-build-1")
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is there a reason not to assert more specifically?

It looks like this will always be my-workflow_default-import-job_my-matrix-build-1.

src/github/SyftGithubAction.ts Show resolved Hide resolved
src/github/SyftGithubAction.ts Show resolved Hide resolved
Copy link
Contributor Author

@kzantow kzantow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

@willmurphyscode willmurphyscode merged commit a5bbe18 into anchore:main Dec 4, 2024
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Expose dependency-snapshot-correlator input
2 participants