Add licenses in sbom from mod cache

smallstep · Feb 14, 2024 · 27803fd · 27803fd
1 parent c634107
commit 27803fd
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -151,6 +151,8 @@ sboms:
   - id: archive
     artifacts: archive
     args: ["$artifact", "--output", "cyclonedx-json=$document"]
+    env:
+      - SYFT_GOLANG_SEARCH_LOCAL_MOD_CACHE_LICENSES=true
   - id: binary
     artifacts: binary
     args: ["$artifact", "--output", "cyclonedx-json=$document"]

diff --git a/docker/build/entrypoint.sh b/docker/build/entrypoint.sh
@@ -8,4 +8,4 @@ apt install --no-install-recommends -y curl pkg-config libpcsclite-dev libpcscli
 # Install syft
 curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
 
-exec /entrypoint.sh $@
+exec /entrypoint.sh $@