diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 8e17d0c..13edb83 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -15,4 +15,10 @@ jobs: steps: - uses: actions/checkout@v4 - name: Build the Docker image - run: docker build . --file dev-opentofu/.devcontainer/Dockerfile --tag dev-opentofu:$(date +%s) + run: docker build . --file dev-opentofu/.devcontainer/Dockerfile --tag dev-opentofu:$(date +%s) --tag dev-opentofu:latest + - name: Scan the image and upload dependency results + uses: anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610 + with: + image: "dev-opentofu:latest" + artifact-name: image.spdx.json + dependency-snapshot: true