[camel-k-runtime] branch main updated: Added GH Action for generating SBOM

[ac...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/camel-k-runtime.git


The following commit(s) were added to refs/heads/main by this push:
     new a369675f Added GH Action for generating SBOM
a369675f is described below

commit a369675f5744a422b633b52878b8df66aae5acce
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Wed May 31 11:06:00 2023 +0200

    Added GH Action for generating SBOM
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 .github/workflows/generate-sbom-main.yml | 58 ++++++++++++--------------------
 1 file changed, 22 insertions(+), 36 deletions(-)

diff --git a/.github/workflows/generate-sbom-main.yml b/.github/workflows/generate-sbom-main.yml
index 5cd28b7f..e92468b1 100644
--- a/.github/workflows/generate-sbom-main.yml
+++ b/.github/workflows/generate-sbom-main.yml
@@ -20,57 +20,43 @@ name: Generate Camel K Runtime SBOM
 on:
   schedule:
     # Every 24 hours
-  - cron: '30 18 * * 0'
+  - cron: '30 17 * * 0'
   workflow_dispatch:
-
-permissions: {}
+  
 jobs:
   build:
-    if: github.repository == 'apache/camel-k-runtime'
-    permissions:
-      contents: write # to create branch (peter-evans/create-pull-request)
-      pull-requests: write # to create a PR (peter-evans/create-pull-request)
-
+    name: Sync Camel Spring Boot Main Branch
+    if: github.repository == 'apache/camel-spring-boot'
     runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        java: [ '11' ]
     steps:
-      - uses: actions/checkout@v3
+      - name: Checkout Camel project
+        uses: actions/checkout@v3
         with:
+          repository: apache/camel
           persist-credentials: false
-      - id: install-mvnd
-        uses: ./.github/actions/install-mvnd
-      - name: Set up JDK ${{ matrix.java }}
+          ref: main
+          path: camel
+      - name: Set up JDK
         uses: actions/setup-java@v3
         with:
           distribution: 'temurin'
-          java-version: ${{ matrix.java }}
+          java-version: 11
           cache: 'maven'
-      - name: mvn build and sbom generation
-        run: ./mvnw -V --no-transfer-progress clean install -DskipTests -Psbom
-      - name: archive logs
-        uses: actions/upload-artifact@v3
-        if: always()
+      - name: Checkout Camel-k-runtime project
+        uses: actions/checkout@v3
         with:
-          name: build.log
-          path: build.log
+          ref: main
+          persist-credentials: false
+          fetch-depth: 0
+      - name: Build Camel-k-runtime Project for generating SBOM
+        run: ./mvnw -V --no-transfer-progress clean install -DskipTests -Psbom
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v5.0.1
         with:
           base: main
           token: ${{ secrets.GITHUB_TOKEN }}
-          commit-message: "Regen SBOM from commit ${{ github.sha }}"
-          committer: GitHub <no...@github.com>
-          author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
-          signoff: true
           branch: regen_bot_sbom
-          title: "Generated sources regen for SBOM"
+          title: '[Github Actions] Periodic Sync Camel K Runtime SBOM'
           body: |
-            Regen bot :robot: found some uncommitted changes after running build on :camel-k-runtime: `main` branch for generating SBOMs.
-            Please do not delete `regen_bot_sbom` branch after merge/rebase.
-          labels: |
-            regen
-            automated pr
-            camel-k-runtime
-          assignees: oscerd
+            Camel-K-runtime for SBOM Generation.
+            see https://github.com/apache/camel-k-runtime/blob/main/.github/workflows/generate-sbom-main.yml