main.yml

on: [push]

jobs:
  soos_sbom_analysis_example:
    name: SOOS SBOM Scan
    runs-on: ubuntu-latest
    steps:
      - uses: actions/setup-node@v4
        with:
          node-version: 20
      - uses: actions/checkout@master
      - name: Run SOOS SBOM Scan
        uses: soos-io/soos-sbom-github-action@b30787d28d18ae0b29dea520cf2e8293c37c3998 # GET Latest Version from https://github.com/marketplace/actions/soos-sbom
        with:
          client_id: ${{ secrets.QA_SOOS_CLIENT_ID }}
          api_key: ${{ secrets.QA_SOOS_API_KEY }}
          api_url: 'https://qa-api.soos.io/api/'
          project_name: "SBOM Github Actions Test"
          #sbom_path: "graphql_v16.8.1.npm.cdx.json"
          sbom_path: "sbom-files/spdx/org.keycloak_keycloak-core_v24.0.4.java.spdx.json"
          verbose: true
          sbom_version: 1.0.0-pre.11
          branch_name: 'invalid-branch'
          #on_failure: 'invalid'