build: add after hook for grype on generated sboms

circonus-labs · Nov 28, 2023 · 0aecd3b · 0aecd3b
1 parent 6aef5e0
commit 0aecd3b
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -92,3 +92,8 @@ sboms:
     env:
       - SYFT_GOLANG_SEARCH_LOCAL_MOD_CACHE_LICENSES=true
       - SYFT_GOLANG_SEARCH_REMOTE_LICENSES=true
+
+after:
+  hooks:
+    - cmd: bash -c 'for b in *.sbom; do grype -q --add-cpes-if-none $b; done'
+      dir: ./dist