Generate and sign SBOM (#2108)

2026-08-27 00:37:20 +00:00 · 2026-08-17 11:26:40 -07:00
parent b158f7d79f
commit e828c21545
1 changed files with 9 additions and 0 deletions
@@ -27,6 +27,15 @@ jobs:
        with:
          go-version-file: 'go.mod'

+      - name: Install Cosign
+        uses: sigstore/cosign-installer@v4.1.2
+
+      - name: Generate and sign SBOM
+        run: make sbom
+        env:
+          COSIGN_KEY: ${{ secrets.COSIGN_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+
      - name: Run GoReleaser
        uses: goreleaser/goreleaser-action@v7
        with: