build: add after hook for grype on generated sboms

circonus · Nov 28, 2023 · 34940b9 · 34940b9
1 parent 0938983
commit 34940b9
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -192,3 +192,8 @@ sboms:
     env:
       - SYFT_GOLANG_SEARCH_LOCAL_MOD_CACHE_LICENSES=true
       - SYFT_GOLANG_SEARCH_REMOTE_LICENSES=true
+
+after:
+  hooks:
+    - cmd: bash -c 'for b in *.sbom; do grype -q --add-cpes-if-none $b; done'
+      dir: ./dist