mirror of
https://github.com/helm/chartmuseum.git
synced 2026-02-05 15:45:50 +01:00
40 lines
917 B
Bash
Executable File
40 lines
917 B
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -euo pipefail
|
|
: ${VERSION:?"VERSION environment variable is not set"}
|
|
|
|
DIR="$( cd "$( dirname "${BASH_SOURCE[0]}" )" && pwd )"
|
|
cd $DIR/../
|
|
mkdir -p ./_dist/
|
|
pushd ./_dist/
|
|
|
|
# Initialize the configuration file
|
|
cat << EOF > .sbom.yaml
|
|
---
|
|
namespace: https://get.helm.sh/chartmuseum-${VERSION}.spdx
|
|
license: Apache-2.0
|
|
name: ChartMuseum
|
|
artifacts:
|
|
- type: directory
|
|
source: ..
|
|
EOF
|
|
|
|
for file in $(ls *.{gz,zip});
|
|
do echo "Adding ${file} to SBOM"
|
|
echo " - type: file" >> .sbom.yaml
|
|
echo " source: ${file}" >> .sbom.yaml
|
|
done
|
|
|
|
echo "Adding image ghcr.io/helm/chartmuseum:${VERSION}"
|
|
echo " - type: image" >> .sbom.yaml
|
|
echo " source: ghcr.io/helm/chartmuseum:${VERSION}" >> .sbom.yaml
|
|
|
|
echo "Wrote configuration file:"
|
|
cat .sbom.yaml
|
|
|
|
bom generate -c .sbom.yaml -o chartmuseum-${VERSION}.spdx
|
|
|
|
rm .sbom.yaml
|
|
popd
|
|
echo "SBOM written to _dist/chartmuseum-${VERSION}.spdx"
|